MAL-2025-17366 Malicious code in com.unity.timeline (npm)

The package com.unity.timeline was found to contain malicious code...

Malicious code in @sporta-technology/d11-web-components.timeline (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-28487 Cross-site Scripting (XSS)

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...