267936 matches found
CLSA-2026-1792369491 TuxCare security update for @babel/helper-plugin-utils (1 CVE)
TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
Malicious code in animate-twcss-bridge (npm)
animate-twcss-bridge 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in animate-twcss-pack (npm)
animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in animatecss-tailwind-helper (npm)
animatecss-tailwind-helper 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hannahgibbs on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in animatecss-tailwind-vectrix (npm)
animatecss-tailwind-vectrix 2.0.6, 2.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by cypherbyte on 2026-09-28. src/motion.js:5 requires the private scoped...
PT-2026-132036
TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133046
TuxCare rebuilt @babel/plugin-transform-spread to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-133070
TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-133191
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-133088
TuxCare rebuilt @babel/plugin-transform-regenerator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-132658
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133195
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133173
TuxCare rebuilt @babel/plugin-transform-private-property-in-object to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133149
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-132032
TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CVE-2026-94273: Missing Authorization
The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment...
PT-2026-133094
TuxCare rebuilt @babel/plugin-transform-regenerator to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-132529
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.12.18-tuxcare.2...