MAL-2025-45728 Malicious code in quasarjet-hyperion-archaeogenetics-mutation (npm)

The package quasarjet-hyperion-archaeogenetics-mutation was found to contain malicious code...

Malicious code in ava-ilable-down-load-mp3-today-2015-33446-joshua-redman-the-bad-plus-7xzw7-debkeo (npm)

The package ava-ilable-down-load-mp3-today-2015-33446-joshua-redman-the-bad-plus-7xzw7-debkeo was found to contain malicious code...

MAL-2025-23344 Malicious code in ipi-cli (npm)

The package ipi-cli was found to contain malicious code...

CVE-2025-5122

The Map Block Leaflet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...