Malicious code in wac-react-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6230f7070c6a961274bcbd24ce695e9079873b97e2a34d1548f39451925cb2 The package wac-react-relay was found to contain malicious code. Source: ghsa-malware 8e4689baba605d11cb3859f852360989942c364318df4e05fc6d1265ff31061...

Malicious code in @brokenzzz/garfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d357b148f23b1917c8d9b30afb0a067acdcdf988ca7b7f8a382726ba3e31b439 The package @brokenzzz/garfish was found to contain malicious code. Source: ghsa-malware...

MAL-2026-335 Malicious code in wac-react-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6230f7070c6a961274bcbd24ce695e9079873b97e2a34d1548f39451925cb2 The package wac-react-relay was found to contain malicious code. Source: ghsa-malware 8e4689baba605d11cb3859f852360989942c364318df4e05fc6d1265ff31061...

MAL-2026-329 Malicious code in @brokenzzz/garfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d357b148f23b1917c8d9b30afb0a067acdcdf988ca7b7f8a382726ba3e31b439 The package @brokenzzz/garfish was found to contain malicious code. Source: ghsa-malware...

Malicious code in 1231dai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d09761b1be982e0d4d6c72363d32a065c01f1799ef2a7df482d0d29b27e5e38 The package 1231dai was found to contain malicious code. Source: ghsa-malware 059687ab0f69f9d832e38192dcf9e4f9f48bdf8469db1d0f049eb65cb9fbc20b Any...

MAL-2026-328 Malicious code in 1231dai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d09761b1be982e0d4d6c72363d32a065c01f1799ef2a7df482d0d29b27e5e38 The package 1231dai was found to contain malicious code. Source: ghsa-malware 059687ab0f69f9d832e38192dcf9e4f9f48bdf8469db1d0f049eb65cb9fbc20b Any...

Malicious code in viem-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec The package viem-js was found to contain malicious code. Source: ghsa-malware 7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d Any...

Malicious code in cyrpto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88df3de403df4549d6cae9b1d508f683da4ed91d472a6020a40a3dbd6d5930fc The package cyrpto was found to contain malicious code. Source: ghsa-malware 1e003c50bdddfa1368c5ed0e356acfab8b21a0d410f1d181471b88221a590cd9 Any...

MAL-2026-331 Malicious code in cyrpto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88df3de403df4549d6cae9b1d508f683da4ed91d472a6020a40a3dbd6d5930fc The package cyrpto was found to contain malicious code. Source: ghsa-malware 1e003c50bdddfa1368c5ed0e356acfab8b21a0d410f1d181471b88221a590cd9 Any...

Malicious code in tailwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f42d8ac771f7de2a89b36d91afb6db0c0445c7c3b9c4c094cf74b1448343d The package tailwin was found to contain malicious code. Source: ghsa-malware 25f1e8ebfcada6d9b8288179365d666ecc4679a549f815f6715e35fc614e03e2 Any...

MAL-2026-334 Malicious code in viem-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec The package viem-js was found to contain malicious code. Source: ghsa-malware 7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d Any...

MAL-2026-332 Malicious code in tailwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f42d8ac771f7de2a89b36d91afb6db0c0445c7c3b9c4c094cf74b1448343d The package tailwin was found to contain malicious code. Source: ghsa-malware 25f1e8ebfcada6d9b8288179365d666ecc4679a549f815f6715e35fc614e03e2 Any...

Malicious code in tronweb-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d60b4098130965b3c2a5c2db0b1ce1c0f4cbde94f9719e9f12b3b90c982478f The package tronweb-tool was found to contain malicious code. Source: ghsa-malware 6592f1600a6d596ff1db03a849560d8a3ccd1643ad249a7bb5a46bac048e2748 A...

MAL-2026-333 Malicious code in tronweb-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d60b4098130965b3c2a5c2db0b1ce1c0f4cbde94f9719e9f12b3b90c982478f The package tronweb-tool was found to contain malicious code. Source: ghsa-malware 6592f1600a6d596ff1db03a849560d8a3ccd1643ad249a7bb5a46bac048e2748 A...

Malicious code in @daffadeveloper/signal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0087b0a9b601b66eed90dbf41396601a483159b3e74933ad6ed63e6a06e3d1 The package @daffadeveloper/signal-node was found to contain malicious code. Source: ghsa-malware...

CVE-2025-12825

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

CVE-2025-12825

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

CVE-2025-12825 User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposure

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

CVE-2025-12825

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

CVE-2025-12825

CVE-2025-12825 affects the WordPress plugin User Registration Using Contact Form 7. The issue is a missing capability check in get_cf7_form_data across all versions up to and including 2.5, enabling unauthorized data access (including Facebook app secrets) by unauthenticated users. Connected sour...