MAL-2025-39367 Malicious code in wix-data (npm)

The package wix-data was found to contain malicious code...

MAL-2025-39369 Malicious code in wix-secrets-backend (npm)

The package wix-secrets-backend was found to contain malicious code...

MAL-2025-9671 Malicious code in @wix-platform/velo-multilingual-helper (npm)

The package @wix-platform/velo-multilingual-helper was found to contain malicious code...

Malicious code in wix-elementory-globals (npm)

The package wix-elementory-globals was found to contain malicious code...

Malicious code in wix-secrets-backend (npm)

The package wix-secrets-backend was found to contain malicious code...

MAL-2025-39368 Malicious code in wix-elementory-globals (npm)

The package wix-elementory-globals was found to contain malicious code...

Malicious code in wix-test-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f32874e6b4601548e20068ae573d90851c71b83f79bf2505dc2795f55e5aba Any computer that has this package installed or running should be considered...

MAL-2025-5482 Malicious code in wix-test-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f32874e6b4601548e20068ae573d90851c71b83f79bf2505dc2795f55e5aba Any computer that has this package installed or running should be considered...

CVE-2024-29188

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's RemoveFolderEx functionality could allow a standard user to delete protected directories. RemoveFolderEx deletes an entire directory tree during installation or...

CVE-2024-24810

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Malicious code in wix-pilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ece1c13a8175e046cf322db45e66e2b92e54bcd72dcacc389a974c1bd7bdbf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3785 Malicious code in wix-pilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ece1c13a8175e046cf322db45e66e2b92e54bcd72dcacc389a974c1bd7bdbf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3841

CVE-2025-3841 affects wix-incubator jam (jam.py; Jinja2 Template Handler). The vulnerability arises from improper neutralization of special elements in the Jinja2 template engine when processing config['template'], enabling an attack on the local host. Exploitation details are not fully enumerate...

PT-2025-17461 · Jinja2 +1 · Jinja2 +2

Name of the Vulnerable Software and Affected Versions: wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9 Description: A vulnerability was found in wix-incubator jam, affecting an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the...

jam 安全漏洞

jam is an open source application from Wix Incubator. A security vulnerability exists in jam, which stems from improper neutralization of special elements of the Jinja2 template engine...

CVE-2024-29187

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it'...

MAL-2025-64 Malicious code in electron-wix-msi-local (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

MAL-2024-11205 Malicious code in @wix-platform/velo-multilingual-helper-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acf5942d718fc2e6daba71b8b9b451481c4ceeee231d333d35695c9b326bc57a The OpenSSF Package Analysis project identified '@wix-platform/velo-multilingual-helper-backend' @ 100.100.106 npm as malicious. It is considere...

Malicious code in wix-smarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...