Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

@asyncapi/glee (>=0.13.0 <=0.37.9), @asyncapi/server-api (>=0.16.0 <=0.16.23) potentially affected by unknown CVE via @asyncapi/markdown-template (=1.6.7)

@asyncapi/markdown-template NPM version =1.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/markdown-template and may be impacted: - @asyncapi/glee =0.13.0, =0.16.0, =0.16.23 Source cves: unknown CVE Source advisory:...

EUVD-2025-198854

Malicious code in @quick-start-soft/quick-markdown-image npm...

Malicious code in @quick-start-soft/quick-markdown-compose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390993c4dc5c3a55b6da923961e34a8fa5caa1f06de7f3ac1ce24dba811c018 The package @quick-start-soft/quick-markdown-compose was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198855

Malicious code in @quick-start-soft/quick-markdown-compose npm...

MAL-2025-190822 Malicious code in @quick-start-soft/quick-markdown-compose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390993c4dc5c3a55b6da923961e34a8fa5caa1f06de7f3ac1ce24dba811c018 The package @quick-start-soft/quick-markdown-compose was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca1d035d2df4ccdc9ea1fc08b5a04c8aa2708547726e92b9ba4138764427ee8 The package @quick-start-soft/quick-markdown was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190821 Malicious code in @quick-start-soft/quick-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca1d035d2df4ccdc9ea1fc08b5a04c8aa2708547726e92b9ba4138764427ee8 The package @quick-start-soft/quick-markdown was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198856

Malicious code in @quick-start-soft/quick-markdown npm...

EUVD-2025-198857

Malicious code in @quick-start-soft/quick-git-clean-markdown npm...

MAL-2025-190820 Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/markdown-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eab3f67164575b589affd305405ab98f13239b541ad15720274e6657e7f6571 The package @asyncapi/markdown-template was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198651

Malicious code in @asyncapi/markdown-template npm...

MAL-2025-190659 Malicious code in @asyncapi/markdown-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eab3f67164575b589affd305405ab98f13239b541ad15720274e6657e7f6571 The package @asyncapi/markdown-template was found to contain malicious code. Source: ghsa-malware...

CVE-2025-65108

md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome. Prior to version 5.2.5, a Markdown front-matter block that contains JavaScript delimiter causes the JS engine in gray-matter library to execute arbitrary code in the Markdown to PDF converter process o...

Malicious code in @quick-start-soft/quick-markdown-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaec604b88bfa99689645f0ecb3061111aa393606337785c71c2755493864f1 The package @quick-start-soft/quick-markdown-image was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190823 Malicious code in @quick-start-soft/quick-markdown-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaec604b88bfa99689645f0ecb3061111aa393606337785c71c2755493864f1 The package @quick-start-soft/quick-markdown-image was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191306 Malicious code in @quick-start-soft/quick-markdown-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...