Malicious code in @zalastax/nolb-nodebb-plugin-i (npm)

The package @zalastax/nolb-nodebb-plugin-i was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)

The package @zalastax/nolb-nodebb-plugin-s was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-w (npm)

The package @zalastax/nolb-nodebb-plugin-w was found to contain malicious code...

MAL-2025-12744 Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)

The package @zalastax/nolb-nodebb-plugin-s was found to contain malicious code...

MAL-2025-12732 Malicious code in @zalastax/nolb-nodebb-plugin-g (npm)

The package @zalastax/nolb-nodebb-plugin-g was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-e (npm)

The package @zalastax/nolb-nodebb-plugin-e was found to contain malicious code...

MAL-2025-12736 Malicious code in @zalastax/nolb-nodebb-plugin-k (npm)

The package @zalastax/nolb-nodebb-plugin-k was found to contain malicious code...

MAL-2025-12752 Malicious code in @zalastax/nolb-nodebb-r (npm)

The package @zalastax/nolb-nodebb-r was found to contain malicious code...

MAL-2025-12726 Malicious code in @zalastax/nolb-nodebb-plugin-a (npm)

The package @zalastax/nolb-nodebb-plugin-a was found to contain malicious code...

MAL-2025-12713 Malicious code in @zalastax/nolb-nodebb-a (npm)

The package @zalastax/nolb-nodebb-a was found to contain malicious code...

MAL-2025-12749 Malicious code in @zalastax/nolb-nodebb-plugin-x (npm)

The package @zalastax/nolb-nodebb-plugin-x was found to contain malicious code...

MAL-2025-12751 Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)

The package @zalastax/nolb-nodebb-plugin-z was found to contain malicious code...

MAL-2025-12753 Malicious code in @zalastax/nolb-nodebb-s (npm)

The package @zalastax/nolb-nodebb-s was found to contain malicious code...

MAL-2025-12746 Malicious code in @zalastax/nolb-nodebb-plugin-u (npm)

The package @zalastax/nolb-nodebb-plugin-u was found to contain malicious code...

MAL-2025-12714 Malicious code in @zalastax/nolb-nodebb-b (npm)

The package @zalastax/nolb-nodebb-b was found to contain malicious code...

MAL-2025-12743 Malicious code in @zalastax/nolb-nodebb-plugin-r (npm)

The package @zalastax/nolb-nodebb-plugin-r was found to contain malicious code...

MAL-2025-12729 Malicious code in @zalastax/nolb-nodebb-plugin-d (npm)

The package @zalastax/nolb-nodebb-plugin-d was found to contain malicious code...

MAL-2025-12733 Malicious code in @zalastax/nolb-nodebb-plugin-h (npm)

The package @zalastax/nolb-nodebb-plugin-h was found to contain malicious code...

CVE-2024-29316

NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group via "isadmin":true...

CVE-2024-57041

A persistent cross-site scripting XSS vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile...