MAL-2025-1012 Malicious code in apple-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...

Malicious code in apple-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...

Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1181 Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

MAL-2025-723 Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

Casio and 16 Other Websites Hit by Double-Entry Web Skimming Attack

Researchers uncover a double-entry website skimming attack targeting Casio and 16 other sites. Learn how cybercriminals exploited vulnerabilities to steal sensitive payment data and evade detection...

CVE-2025-24635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Reflected XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.1...

CVE-2025-24635

CVE-2025-24635 concerns the WordPress Paytm – Donation Plugin (versions n/a through 2.3.1). The underlying issue is an “Improper Neutralization of Input During Web Page Generation” that enables a Reflected Cross-Site Scripting (XSS) attack. Affected component: plugin code responsible for renderin...

WordPress plugin Paytm Payment Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-5463 · Paytm · Paytm Payment Donation

Name of the Vulnerable Software and Affected Versions: Paytm Payment Donation versions n/a through 2.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

CVE-2025-0872

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-0744

an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the "/demos/embedai/pmtcashondelivery/pay" endpoint...

The 2024 Ransomware Landscape: Looking back on another painful year

The ransomware landscape in 2024 continued to evolve at a rapid pace, outgrowing many of the trends we saw in 2023. Threat actors remained relentless and innovative, targeting organizations of all sizes and sectors. In this post, we’ll examine the latest data points, discuss notable groups, and...

MAL-2025-537 Malicious code in lyft-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 037f3d39ceca372959df5cba4db994d11d49eed766635b9e474d217f2e600335 The OpenSSF Package Analysis project identified 'lyft-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 037f3d39ceca372959df5cba4db994d11d49eed766635b9e474d217f2e600335 The OpenSSF Package Analysis project identified 'lyft-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-492 Malicious code in iberia-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df55c90f71da02d24eeb4696aa783de823c705d9f771521b950cafdb2a537c03 The OpenSSF Package Analysis project identified 'iberia-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df55c90f71da02d24eeb4696aa783de823c705d9f771521b950cafdb2a537c03 The OpenSSF Package Analysis project identified 'iberia-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-505 Malicious code in instacart-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 873edad68d1d7687dd48205c5e670bcada0b9b13ff27bc030b145c8669257904 The OpenSSF Package Analysis project identified 'instacart-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...