Vulnerabilities published in 2025
237,086 vulnerabilities were published in 2025: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 922 of 2371.
- MAL-2025-190947 Malicious code in @posthog/plugin-server (npm)
- MAL-2025-190946 Malicious code in @posthog/drop-events-on-property-plugin (npm)
- MAL-2025-190945 Malicious code in @posthog/clickhouse (npm)
- MAL-2025-190944 Malicious code in wellness-expert-ng-gallery (npm)
- MAL-2025-190943 Malicious code in web-scraper-mcp (npm)
- MAL-2025-190942 Malicious code in valid-south-african-id (npm)
- MAL-2025-190941 Malicious code in use-unsaved-changes (npm)
- MAL-2025-190940 Malicious code in url-encode-decode (npm)
- MAL-2025-19094 Malicious code in easydraft (npm)
- MAL-2025-190939 Malicious code in upload-to-play-store (npm)
- MAL-2025-190938 Malicious code in uplandui (npm)
- MAL-2025-190937 Malicious code in undefsafe-typed (npm)
- MAL-2025-190936 Malicious code in typefence (npm)
- MAL-2025-190935 Malicious code in @ensdomains/op-resolver-contracts (npm)
- MAL-2025-190934 Malicious code in @ensdomains/ensjs-react (npm)
- MAL-2025-190933 Malicious code in @ensdomains/ensjs (npm)
- MAL-2025-190932 Malicious code in @ensdomains/ens-test-env (npm)
- MAL-2025-190931 Malicious code in @ensdomains/ens-contracts (npm)
- MAL-2025-190930 Malicious code in @ensdomains/durin (npm)
- MAL-2025-19093 Malicious code in easycrm (npm)
- MAL-2025-190929 Malicious code in @ensdomains/ccip-read-cf-worker (npm)
- MAL-2025-190928 Malicious code in zapier-platform-legacy-scripting-runner (npm)
- MAL-2025-190927 Malicious code in web-types-lit (npm)
- MAL-2025-190926 Malicious code in posthog-react-native (npm)
- MAL-2025-190925 Malicious code in posthog-node (npm)
- MAL-2025-190924 Malicious code in posthog-docusaurus (npm)
- MAL-2025-190923 Malicious code in mcp-use (npm)
- MAL-2025-190922 Malicious code in create-mcp-use-app (npm)
- MAL-2025-190921 Malicious code in capacitor-voice-recorder-wav (npm)
- MAL-2025-190920 Malicious code in @zapier/stubtree (npm)
- MAL-2025-19092 Malicious code in easybuy (npm)
- MAL-2025-190919 Malicious code in @zapier/spectral-api-ruleset (npm)
- MAL-2025-190918 Malicious code in @zapier/mcp-integration (npm)
- MAL-2025-190917 Malicious code in @zapier/ai-actions-react (npm)
- MAL-2025-190916 Malicious code in @tezign/html-webpack-plugin (npm)
- MAL-2025-190915 Malicious code in @seung-ju/react-native-action-sheet (npm)
- MAL-2025-190914 Malicious code in @sauravthakur/corplib (npm)
- MAL-2025-190913 Malicious code in @postman/wdio-junit-reporter (npm)
- MAL-2025-190912 Malicious code in @postman/wdio-allure-reporter (npm)
- MAL-2025-190911 Malicious code in @postman/secret-scanner-wasm (npm)
- MAL-2025-190910 Malicious code in @postman/pretty-ms (npm)
- MAL-2025-19091 Malicious code in easy-zero-gamma-promise-deploy (npm)
- MAL-2025-190909 Malicious code in @postman/postman-mcp-server (npm)
- MAL-2025-190908 Malicious code in @postman/postman-mcp-cli (npm)
- MAL-2025-190907 Malicious code in @postman/postman-collection-fork (npm)
- MAL-2025-190906 Malicious code in @postman/pm-bin-windows-x64 (npm)
- MAL-2025-190905 Malicious code in @postman/pm-bin-macos-x64 (npm)
- MAL-2025-190904 Malicious code in @postman/pm-bin-macos-arm64 (npm)
- MAL-2025-190903 Malicious code in @postman/pm-bin-linux-x64 (npm)
- MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)
- MAL-2025-190901 Malicious code in @postman/final-node-keytar (npm)
- MAL-2025-190900 Malicious code in @posthog/wizard (npm)
- MAL-2025-19090 Malicious code in easy-wallet (npm)
- MAL-2025-1909 Malicious code in orderly-js-sdk-cra-template (npm)
- MAL-2025-190899 Malicious code in @posthog/web-dev-server (npm)
- MAL-2025-190898 Malicious code in @posthog/variance-plugin (npm)
- MAL-2025-190897 Malicious code in @posthog/url-normalizer-plugin (npm)
- MAL-2025-190896 Malicious code in @posthog/twitter-followers-plugin (npm)
- MAL-2025-190895 Malicious code in @posthog/twilio-plugin (npm)
- MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)
- MAL-2025-190893 Malicious code in @posthog/snowflake-export-plugin (npm)
- MAL-2025-190892 Malicious code in @posthog/sendgrid-plugin (npm)
- MAL-2025-190891 Malicious code in @posthog/rrweb-player (npm)
- MAL-2025-190890 Malicious code in @posthog/react-rrweb-player (npm)
- MAL-2025-19089 Malicious code in easy-visualize-decode-phi-meta (npm)
- MAL-2025-190889 Malicious code in @posthog/plugin-unduplicates (npm)
- MAL-2025-190888 Malicious code in @posthog/pagerduty-plugin (npm)
- MAL-2025-190887 Malicious code in @posthog/nextjs-config (npm)
- MAL-2025-190886 Malicious code in @posthog/nextjs (npm)
- MAL-2025-190885 Malicious code in @posthog/maxmind-plugin (npm)
- MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)
- MAL-2025-190883 Malicious code in @posthog/ingestion-alert-plugin (npm)
- MAL-2025-190882 Malicious code in @posthog/hedgehog-mode (npm)
- MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)
- MAL-2025-190880 Malicious code in @posthog/github-release-tracking-plugin (npm)
- MAL-2025-19088 Malicious code in easy-key-key-web-omega (npm)
- MAL-2025-190879 Malicious code in @posthog/geoip-plugin (npm)
- MAL-2025-190878 Malicious code in @posthog/first-time-event-tracker (npm)
- MAL-2025-190877 Malicious code in @posthog/event-sequence-timer-plugin (npm)
- MAL-2025-190876 Malicious code in @posthog/databricks-plugin (npm)
- MAL-2025-190875 Malicious code in @posthog/customerio-plugin (npm)
- MAL-2025-190874 Malicious code in @posthog/currency-normalization-plugin (npm)
- MAL-2025-190873 Malicious code in @posthog/automatic-cohorts-plugin (npm)
- MAL-2025-190872 Malicious code in @mparpaillon/page (npm)
- MAL-2025-190871 Malicious code in @mparpaillon/imagesloaded (npm)
- MAL-2025-190870 Malicious code in @mparpaillon/connector-parse (npm)
- MAL-2025-19087 Malicious code in easy-encode-notify-emulate-cache (npm)
- MAL-2025-190869 Malicious code in @mcp-use/mcp-use (npm)
- MAL-2025-190868 Malicious code in @mcp-use/inspector (npm)
- MAL-2025-190867 Malicious code in @mcp-use/cli (npm)
- MAL-2025-190866 Malicious code in @ensdomains/buffer (npm)
- MAL-2025-190865 Malicious code in @darwinex/react-custom-scrollbars (npm)
- MAL-2025-190864 Malicious code in ra-data-firebase (npm)
- MAL-2025-190863 Malicious code in @asyncapi/studio (npm)
- MAL-2025-190862 Malicious code in zuper-stream (npm)
- MAL-2025-190861 Malicious code in zapier-scripts (npm)
- MAL-2025-190860 Malicious code in test-foundry-app (npm)
- MAL-2025-19086 Malicious code in easy-boolean-mock-proxy-stack (npm)
- MAL-2025-190859 Malicious code in scgs-capacitor-subscribe (npm)
- MAL-2025-190858 Malicious code in rollup-plugin-httpfile (npm)