CLSA-2026-1792369504 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792369505 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792369502 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792369501 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...

CLSA-2026-1792369499 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792369500 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792369495 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

CLSA-2026-1792369494 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792369489 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792369490 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792369493 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792369492 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792369491 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

Malicious code in animate-twcss-bridge (npm)

animate-twcss-bridge 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in animatecss-tailwind-helper (npm)

animatecss-tailwind-helper 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hannahgibbs on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in animatecss-tailwind-luminary (npm)

animatecss-tailwind-luminary 2.0.6, 2.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by cypherbyte on 2026-09-28. src/motion.js:5 requires the private scoped...

Malicious code in animatecss-tailwind-vectrix (npm)

animatecss-tailwind-vectrix 2.0.6, 2.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by cypherbyte on 2026-09-28. src/motion.js:5 requires the private scoped...

PT-2026-133170

TuxCare rebuilt @babel/plugin-transform-private-property-in-object to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CVE-2026-94273: Missing Authorization

The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment...