Malicious code in ms-azuretools.vscode-azureresourcegroups (npm)

The package ms-azuretools.vscode-azureresourcegroups was found to contain malicious code...

Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-32485 Malicious code in rph-tools (npm)

The package rph-tools was found to contain malicious code...

MAL-2025-16694 Malicious code in cdk-integ-tools (npm)

The package cdk-integ-tools was found to contain malicious code...

MAL-2025-9268 Malicious code in @remove-bg/remove-bg-tools (npm)

The package @remove-bg/remove-bg-tools was found to contain malicious code...

MAL-2025-26295 Malicious code in micro-tools (npm)

The package micro-tools was found to contain malicious code...

MAL-2025-37050 Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-22883 Malicious code in ic-tools-mailer (npm)

The package ic-tools-mailer was found to contain malicious code...

Malicious code in sglk-dev-tools (npm)

The package sglk-dev-tools was found to contain malicious code...

MAL-2025-23748 Malicious code in jetpack-js-tools (npm)

The package jetpack-js-tools was found to contain malicious code...

CVE-2025-53219

CVE-2025-53219 is a CSRF vulnerability in WordPress WP-Database-Optimizer-Tools (versions up to 0.2). The issue allows Cross Site Request Forgery by authenticated users; impact is described as I: LOW, A: LOW, with UI interaction required and network/low complexity. The affected plugin is WP-Datab...

CVE-2025-53219 WordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools wp-database-optimizer-tools allows Cross Site Request Forgery.This issue affects WP-Database-Optimizer-Tools: from n/a through = 0.2...

CVE-2025-53219 WordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools allows Cross Site Request Forgery. This issue affects WP-Database-Optimizer-Tools: from n/a through 0.2...

WordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Skalucy in WordPress Plugin WP-Database-Optimizer-Tools versions = 0.2...

Malicious Package

Overview idd-64bit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...

Malicious Package

Overview tidpz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview tgsendzon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...

Malicious Package

Overview cafebey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview t64d is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview tgsendduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...