MAL-2025-22064 Malicious code in guru-react-native-widgets (npm)

The package guru-react-native-widgets was found to contain malicious code...

MAL-2025-9231 Malicious code in @paysol-widgets/ts-client (npm)

The package @paysol-widgets/ts-client was found to contain malicious code...

Malicious code in @light-widgets/legacy (npm)

The package @light-widgets/legacy was found to contain malicious code...

Malicious code in googlesitekit-widgets (npm)

The package googlesitekit-widgets was found to contain malicious code...

Malicious code in scm-ui-widgets (npm)

The package scm-ui-widgets was found to contain malicious code...

Malicious code in guru-react-native-widgets (npm)

The package guru-react-native-widgets was found to contain malicious code...

MAL-2025-21733 Malicious code in googlesitekit-widgets (npm)

The package googlesitekit-widgets was found to contain malicious code...

MAL-2025-14477 Malicious code in anan-d-widgets (npm)

The package anan-d-widgets was found to contain malicious code...

MAL-2025-32801 Malicious code in scm-ui-widgets (npm)

The package scm-ui-widgets was found to contain malicious code...

MAL-2025-33794 Malicious code in sportstream-widgets (npm)

The package sportstream-widgets was found to contain malicious code...

Malicious code in prosoft-crm-widgets (npm)

The package prosoft-crm-widgets was found to contain malicious code...

Malicious code in sutter-health-widgets (npm)

The package sutter-health-widgets was found to contain malicious code...

Malicious code in anan-d-widgets (npm)

The package anan-d-widgets was found to contain malicious code...

Malicious code in beam-widgets (npm)

The package beam-widgets was found to contain malicious code...

MAL-2025-8431 Malicious code in @light-widgets/legacy (npm)

The package @light-widgets/legacy was found to contain malicious code...

MAL-2025-34248 Malicious code in sutterhealth-ui-toolkit-widgets (npm)

The package sutterhealth-ui-toolkit-widgets was found to contain malicious code...

MAL-2025-30752 Malicious code in prosoft-crm-widgets (npm)

The package prosoft-crm-widgets was found to contain malicious code...

MAL-2025-9229 Malicious code in @paysol-widgets/api-client (npm)

The package @paysol-widgets/api-client was found to contain malicious code...

CVE-2025-8874

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...