Malicious code in promise-xo-umbriel-start (npm)

The package promise-xo-umbriel-start was found to contain malicious code...

MAL-2025-39908 Malicious code in xo-react (npm)

The package xo-react was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 4e894f1b9dae05a3bed6a449b72aa80ec41140feda0bb1bd926380239e701886 This package installs a dependency hosted on a custom domain that runs an info...

MAL-2025-39907 Malicious code in xo-publish-semantic-ui-lacerta (npm)

The package xo-publish-semantic-ui-lacerta was found to contain malicious code...

Malicious code in xo-beaver (npm)

The package xo-beaver was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f47822e91a268b85634963cc1c620bf45c186418ab782e91759b54cb3585ad44 This package installs a dependency hosted on a custom domain that runs an info...

Malicious code in xo-space (npm)

The package xo-space was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c714200e1f1a835c8bc557fe64c303acb1653f9e6dffcce0bbfa0e1bf1545800 This package installs a dependency hosted on a custom domain that runs an info...

MAL-2025-39900 Malicious code in xo-credit-components (npm)

The package xo-credit-components was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security bfbd8e01be1c743ce546f2b9c82f0c0dc9eed09fc3630a0904a9925eefe0b83f This package installs a dependency hosted on a custom domain that ru...

MAL-2025-26872 Malicious code in mui-transform-nightmare-xo (npm)

The package mui-transform-nightmare-xo was found to contain malicious code...

MAL-2025-23227 Malicious code in ini-dactyl-xo-perseus (npm)

The package ini-dactyl-xo-perseus was found to contain malicious code...

MAL-2025-32896 Malicious code in sedimentology-xo-puppeteer-warp (npm)

The package sedimentology-xo-puppeteer-warp was found to contain malicious code...

MAL-2025-39904 Malicious code in xo-jquery-mask-plugin (npm)

The package xo-jquery-mask-plugin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f59460b8ba9281b320efd1888070928d3c31f86dd0770c7fe38d1f2eecc1e66b This package installs a dependency hosted on a custom domain that...

MAL-2025-28665 Malicious code in paleobotany-planetology-schema-xo (npm)

The package paleobotany-planetology-schema-xo was found to contain malicious code...

MAL-2025-39902 Malicious code in xo-dione-wasat-palynology (npm)

The package xo-dione-wasat-palynology was found to contain malicious code...

MAL-2025-39909 Malicious code in xo-selenium-commitlint-config-angular-genomics (npm)

The package xo-selenium-commitlint-config-angular-genomics was found to contain malicious code...

MAL-2025-26416 Malicious code in mineralogy-passport-xo-comet (npm)

The package mineralogy-passport-xo-comet was found to contain malicious code...

Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2021-47647

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are caused by a missing clock parent. pcie0rchngclksrc has numparents set to 2 but only one parent is actually set via parenthws, it should also ha...

WordPress XO Slider plugin <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin XO Slider versions = 3.8.6...

CVE-2024-8324

The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘getslider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2024-8324 XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘getslider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...