153 matches found
Malicious code in tw-modern-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5263f4880e1caf988c78cea312bf9087935eadf7367438ca98023d0b03a5ab12 The package tw-modern-ui was found to contain malicious code. Source: ghsa-malware 739792de3e777b4dcdf28cf380425a6e0e3082c65f5f72ff73d4ae60ed685d98 A...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005349)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005349 advisory. Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database...
Server-side Request Forgery (SSRF)
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the processing of page content by Twig templates when configuration permits undefined PHP functions to be...
CVE-2025-53422: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeWarriors WhatsApp Chat for WordPress and WooCommerce tw-whatsapp-chat-rotator allows Reflected XSS.This issue affects WhatsApp Chat for WordPress and WooCommerce: from n/a through = 1.2.1...
EUVD-2025-33609
Malicious code in tw-webkit-universal npm...
Malicious code in tw-webkit-universal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48288 Malicious code in tw-webkit-universal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tw-chat-search (npm)
The package tw-chat-search was found to contain malicious code...
Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
Malicious code in @zalastax/nolb-react-tw (npm)
The package @zalastax/nolb-react-tw was found to contain malicious code...
MAL-2025-33340 Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
MAL-2025-33342 Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
MAL-2025-37349 Malicious code in tw-chat-search (npm)
The package tw-chat-search was found to contain malicious code...
MAL-2025-13818 Malicious code in @zalastax/nolb-react-tw (npm)
The package @zalastax/nolb-react-tw was found to contain malicious code...
MAL-2025-33341 Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
Malware in tw-core-ui
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
