MAL-2025-27675 Malicious code in nodebb-plugin-sirius (npm)

The package nodebb-plugin-sirius was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)

The package @zalastax/nolb-nodebb-plugin-z was found to contain malicious code...

MAL-2025-12746 Malicious code in @zalastax/nolb-nodebb-plugin-u (npm)

The package @zalastax/nolb-nodebb-plugin-u was found to contain malicious code...

MAL-2025-12727 Malicious code in @zalastax/nolb-nodebb-plugin-b (npm)

The package @zalastax/nolb-nodebb-plugin-b was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-o (npm)

The package @zalastax/nolb-nodebb-plugin-o was found to contain malicious code...

MAL-2025-12723 Malicious code in @zalastax/nolb-nodebb-plugin- (npm)

The package @zalastax/nolb-nodebb-plugin- was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-t (npm)

The package @zalastax/nolb-nodebb-plugin-t was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-w (npm)

The package @zalastax/nolb-nodebb-plugin-w was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-c (npm)

The package @zalastax/nolb-nodebb-plugin-c was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-j (npm)

The package @zalastax/nolb-nodebb-plugin-j was found to contain malicious code...

MAL-2025-12721 Malicious code in @zalastax/nolb-nodebb-plugi (npm)

The package @zalastax/nolb-nodebb-plugi was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-h (npm)

The package @zalastax/nolb-nodebb-plugin-h was found to contain malicious code...

MAL-2025-12739 Malicious code in @zalastax/nolb-nodebb-plugin-n (npm)

The package @zalastax/nolb-nodebb-plugin-n was found to contain malicious code...

MAL-2025-12728 Malicious code in @zalastax/nolb-nodebb-plugin-c (npm)

The package @zalastax/nolb-nodebb-plugin-c was found to contain malicious code...

MAL-2025-12747 Malicious code in @zalastax/nolb-nodebb-plugin-v (npm)

The package @zalastax/nolb-nodebb-plugin-v was found to contain malicious code...

MAL-2025-12748 Malicious code in @zalastax/nolb-nodebb-plugin-w (npm)

The package @zalastax/nolb-nodebb-plugin-w was found to contain malicious code...

MAL-2025-12734 Malicious code in @zalastax/nolb-nodebb-plugin-i (npm)

The package @zalastax/nolb-nodebb-plugin-i was found to contain malicious code...

MAL-2025-12745 Malicious code in @zalastax/nolb-nodebb-plugin-t (npm)

The package @zalastax/nolb-nodebb-plugin-t was found to contain malicious code...

CVE-2020-15156

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...

Malicious code in nodebb-plugin-sso-auto-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3ab1b77199e67562a75d535a0d6c88f5d8d4c76b8df6d226e9528b0e050006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...