A Bootiful Podcast: Russ Miles on Safer, More Productive Interactions with AI

I’m joined, I think, for the second time by my friend, the legendary architect and developer extraordinaire Russ Miles, who has given some of the most cerebral and exciting Spring keynotes and talks ever. And this time, he’s back to talk about — guess what — A.I. As usual, he’s got a different an...

EUVD-2025-77542

Malicious code in productivealpacaaquamarine-22 npm...

EUVD-2025-78545

Malicious code in productivekoalaz3n npm...

Malicious code in productive_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26c42243be1a2f3c8880752c1d8022a7b51754a15a29c5e6b5f32ac232b90ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80878

Malicious code in productivebobolink0xrequest npm...

EUVD-2025-72041

Malicious code in productivepurplepython-21-tisubasah npm...

EUVD-2025-62516

Malicious code in productivecicadaz3n npm...

EUVD-2025-62515

Malicious code in productivefalconz3n npm...

EUVD-2025-62514

Malicious code in productivegiraffez3n npm...

MAL-2025-96038 Malicious code in productive_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b63532922e55b6e9f8fbc91b7d6edc53ae154104905a4bcfba323eacb8e721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62512

Malicious code in productivesilkwormz3n npm...

EUVD-2025-67732

Malicious code in productivevulturez3n npm...

EUVD-2025-52618

Malicious code in productive-teal-leopon npm...

EUVD-2025-52620

Malicious code in productive-amaranth-bobolink npm...

EUVD-2025-52619

Malicious code in productive-azure-wasp npm...

EUVD-2025-13739

Malicious code in bioql PyPI...

EUVD-2025-29677

Malicious code in bioql PyPI...

WordPress Productive Style plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Productive Style plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-suppli...

CVE-2025-8394

The CVE-2025-8394 entry describes a Stored Cross-Site Scripting vulnerability in the WordPress Productive Style plugin, affecting all versions up to and including 1.1.23. The issue arises from insufficient input sanitization and output escaping in the display_productive_breadcrumb shortcode, allo...

CVE-2025-8394 Productive Style <= 1.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_productive_breadcrumb Shortcode

The Productive Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's displayproductivebreadcrumb shortcode in all versions up to, and including, 1.1.23 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...