MAL-2025-1426 Malicious code in orangex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e602f5938bee28a86f24337d394cf7720c3354700e633b8fb0d3ab2c13a83c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1421 Malicious code in kcex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce9b582a4e9a1941b68d4f5d683d97c93a4bda05b8d494dc0bac426302aa4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1409 Malicious code in digifinex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c75b07e3649768c2afdcf1c973d1f5fd4025afd59b0ab2bfe606571a569748 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1456 Malicious code in yizhifabao62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d18ca6a3b99770e3e610f9e0ec72712c2d9f11bd1c552699dcb95fbf4169f17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1449 Malicious code in yizhifabao55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 185d2f62a8857d3e7f999d149e1c3f6ff67133772af665b6d9a44d56e5b82eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1444 Malicious code in telegram-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce26b83a8f4eda763f723d82a057158e8b6265de39b789ca17e5d38884401cf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1442 Malicious code in telegram-bot-hoster2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0cd2b5b45da2e84d95f63a130c4c69abcf83af2365c6a45ab3a60b6a61fc41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13769

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'themeoptionsajaxpostaction' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for...

MAL-2025-1382 Malicious code in vidio-kmm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e504408eb9deb6119908874c0e0d1a2ed179bfe908a21a8f42d8296ede12dbc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1363 Malicious code in gestalt-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc35868180fe5879113537fbdce9118cb06ace84a31d55fa9268d5bc050091e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1371 Malicious code in orange-meets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37037d337633f63999cc9026f347d4542faaf8a86bc78184e98a7031c17cfbe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1373 Malicious code in pages-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8fdc9ed5e9c2f9d6d0e57ed2a060d76ead69858fcbae60c4265500ef4dd1527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1361 Malicious code in fontsource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75a000a9d03b24e4668d3039226081176ee3e9d6488d0bfb2fc7dfceb1b05e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1372 Malicious code in osae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2bd262915382cb128bb666e68b026eba1833defef6743b4def27e204a71d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1366 Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1369 Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13770

The CVE-2024-13770 entry concerns the Puzzles | WP Magazine / Review with Store WordPress Theme + RTL (WordPress) vulnerable to unauthenticated PHP Object Injection in all versions up to 4.2.4 via deserialization of input in the view_more_posts AJAX action. The impact is contingent on a POP chain...

CVE-2024-13769 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'themeoptionsajaxpostaction' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for...

CVE-2024-13769 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'themeoptionsajaxpostaction' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for...

MAL-2025-1241 Malicious code in cosmwasmjs-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 034ab0b125042454171dd648c2dd4defeec7fdb36aa9db667c7cd99922881a4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...