MAL-2025-23883 Malicious code in jp_postal_codes (npm)

The package jppostalcodes was found to contain malicious code...

Shopify: XSS on postal codes

Hi, 190951 is not fully fixed. Scripts can be injected via a csv file and make it execute in the application. Screenshots attached...

Shopify: XSS on manually entering Postal codes

Hello, I had found a XSS vulnerability in manually entering postal codes in "Advance Cash On Delivery" option which is newly launched for indians.Below is the screenshot attached. Thank You...