MAL-2025-12721 Malicious code in @zalastax/nolb-nodebb-plugi (npm)

The package @zalastax/nolb-nodebb-plugi was found to contain malicious code...

MAL-2025-12741 Malicious code in @zalastax/nolb-nodebb-plugin-p (npm)

The package @zalastax/nolb-nodebb-plugin-p was found to contain malicious code...

MAL-2025-12750 Malicious code in @zalastax/nolb-nodebb-plugin-y (npm)

The package @zalastax/nolb-nodebb-plugin-y was found to contain malicious code...

MAL-2025-12749 Malicious code in @zalastax/nolb-nodebb-plugin-x (npm)

The package @zalastax/nolb-nodebb-plugin-x was found to contain malicious code...

MAL-2025-12744 Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)

The package @zalastax/nolb-nodebb-plugin-s was found to contain malicious code...

MAL-2025-12724 Malicious code in @zalastax/nolb-nodebb-plugin-2 (npm)

The package @zalastax/nolb-nodebb-plugin-2 was found to contain malicious code...

MAL-2025-12737 Malicious code in @zalastax/nolb-nodebb-plugin-l (npm)

The package @zalastax/nolb-nodebb-plugin-l was found to contain malicious code...

MAL-2025-12725 Malicious code in @zalastax/nolb-nodebb-plugin-6 (npm)

The package @zalastax/nolb-nodebb-plugin-6 was found to contain malicious code...

MAL-2025-12723 Malicious code in @zalastax/nolb-nodebb-plugin- (npm)

The package @zalastax/nolb-nodebb-plugin- was found to contain malicious code...

MAL-2025-12729 Malicious code in @zalastax/nolb-nodebb-plugin-d (npm)

The package @zalastax/nolb-nodebb-plugin-d was found to contain malicious code...

MAL-2025-27676 Malicious code in nodebb-plugin-spaffnerds (npm)

The package nodebb-plugin-spaffnerds was found to contain malicious code...

MAL-2025-12726 Malicious code in @zalastax/nolb-nodebb-plugin-a (npm)

The package @zalastax/nolb-nodebb-plugin-a was found to contain malicious code...

MAL-2025-12751 Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)

The package @zalastax/nolb-nodebb-plugin-z was found to contain malicious code...

MAL-2025-12728 Malicious code in @zalastax/nolb-nodebb-plugin-c (npm)

The package @zalastax/nolb-nodebb-plugin-c was found to contain malicious code...

MAL-2025-12739 Malicious code in @zalastax/nolb-nodebb-plugin-n (npm)

The package @zalastax/nolb-nodebb-plugin-n was found to contain malicious code...

MAL-2025-12732 Malicious code in @zalastax/nolb-nodebb-plugin-g (npm)

The package @zalastax/nolb-nodebb-plugin-g was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-6 (npm)

The package @zalastax/nolb-nodebb-plugin-6 was found to contain malicious code...

CVE-2020-15156

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...

Malicious code in nodebb-plugin-sso-auto-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3ab1b77199e67562a75d535a0d6c88f5d8d4c76b8df6d226e9528b0e050006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross site request forgery (csrf)

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...