PT-2026-71109

A repository publisher without delete permission may modify protected package content under specific conditions...

CVE-2026-14235

CVE-2026-14235 affects the Download Manager WordPress plugin before 3.3.62. The vulnerability arises because the temporary download token is not bound to the requesting session and is not expired promptly, turning it into a long-lived, multi-use, portable bearer token. This allows an attacker who...

MAL-2025-23263 Malicious code in integer-execute-shell-runtime-protected (npm)

The package integer-execute-shell-runtime-protected was found to contain malicious code...