Malicious code in vulcan-docusaurus-quark-mineralogy (npm)

The package vulcan-docusaurus-quark-mineralogy was found to contain malicious code...

MAL-2025-33313 Malicious code in sirius-dione-sqlite-docusaurus (npm)

The package sirius-dione-sqlite-docusaurus was found to contain malicious code...

MAL-2025-29633 Malicious code in prettier-unuk-genomics-docusaurus (npm)

The package prettier-unuk-genomics-docusaurus was found to contain malicious code...

Malicious code in prettier-unuk-genomics-docusaurus (npm)

The package prettier-unuk-genomics-docusaurus was found to contain malicious code...

MAL-2025-18581 Malicious code in docusaurus-mantle-volcanology-entanglement (npm)

The package docusaurus-mantle-volcanology-entanglement was found to contain malicious code...

MAL-2025-26162 Malicious code in meissa-firebase-equinox-docusaurus (npm)

The package meissa-firebase-equinox-docusaurus was found to contain malicious code...

MAL-2025-18582 Malicious code in docusaurus-oberon-test-concurrently (npm)

The package docusaurus-oberon-test-concurrently was found to contain malicious code...

MAL-2025-18579 Malicious code in docusaurus-cladistics-version-lacerta (npm)

The package docusaurus-cladistics-version-lacerta was found to contain malicious code...

MAL-2025-25537 Malicious code in loglevel-docusaurus-scripts-less (npm)

The package loglevel-docusaurus-scripts-less was found to contain malicious code...

Malicious code in glaciology-electron-builder-docusaurus-configstore (npm)

The package glaciology-electron-builder-docusaurus-configstore was found to contain malicious code...

Malicious code in docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6714 Malicious code in docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ifood-docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6728 Malicious code in ifood-docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53624

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

GitHub Personal Access Token Exposure in docusaurus-plugin-content-gists Summary docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for...

GHSA-QF34-QPR4-5PPH docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

GitHub Personal Access Token Exposure in docusaurus-plugin-content-gists Summary docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for...

CVE-2025-53624

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

CVE-2025-53624 docusaurus-plugin-content-gists Exposes GitHub Personal Access Token

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

CVE-2025-53624

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...