MAL-2025-40136 Malicious code in yam-4st-project (npm)

The package yam-4st-project was found to contain malicious code...

MAL-2025-39052 Malicious code in webtask-sequence-editor (npm)

The package webtask-sequence-editor was found to contain malicious code...

MAL-2025-34961 Malicious code in test-mlw2-blads-jambo (npm)

The package test-mlw2-blads-jambo was found to contain malicious code...

MAL-2025-8317 Malicious code in @landmineaknpm2/voluptatibus-sint-vitae (npm)

The package @landmineaknpm2/voluptatibus-sint-vitae was found to contain malicious code...

MAL-2025-40613 Malicious code in yosino (npm)

The package yosino was found to contain malicious code...

MAL-2025-36996 Malicious code in tmswitch (npm)

The package tmswitch was found to contain malicious code...

MAL-2025-6845 Malicious code in mgtyler (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6843 Malicious code in localeslice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6836 Malicious code in exoscale (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6847 Malicious code in newrelic.log (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6832 Malicious code in @sangith/newrelic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df1e3a9bd21e4d7ca6ae9595850002d67806ca9fd408d068bad6ce3a8a4c2dbf The OpenSSF Package Analysis project identified '@sangith/newrelic' @...

MAL-2025-6834 Malicious code in asciidoctor.rb (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6853 Malicious code in sendbird-uikit-sample-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6844 Malicious code in mapbox-gl-js-toys (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6846 Malicious code in newrelic-helper-lib (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-27322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

PT-2025-17069 · Woocommerce · Bappa Mal Qr Code For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bappa Mal QR Code for WooCommerce versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

CVE-2025-27322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

Google Chromium Misimplementation Vulnerability

Microsoft Edge Chromium-based is a web browser developed by Microsoft based on the Chromium open source project and other open source software. A mal-implementation vulnerability exists in the Permission Prompts component of Microsoft Edge Chromium-based, no details of the vulnerability are...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...