EUVD-2025-177950

Malicious code in markdown-pdf-draco-kuiperbelt-tethys npm...

MAL-2025-187880 Malicious code in luna-sequelize-markdown-pdf-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816ece07571d3eee4e7cb9bac7ec4cbac325b184558f6366f6bea764c321333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178717

Malicious code in geodynamo-stop-hexo-markdown-pdf npm...

Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180499

Malicious code in aether-dione-test-markdown-pdf npm...

EUVD-2025-176630

Malicious code in rimraf-markdown-markdown-pdf-biomimicry npm...

EUVD-2025-178086

Malicious code in link-slidev-dione-markdown-pdf npm...

EUVD-2025-177804

Malicious code in miranda-markdown-pdf-rate-limiter-graphql npm...

EUVD-2025-178146

Malicious code in leda-loopback-markdown-pdf-quasar npm...

EUVD-2025-177389

Malicious code in package-process-helios-markdown-pdf npm...

EUVD-2025-178521

Malicious code in higgs-markdown-pdf-kaus-helmet npm...

EUVD-2025-179023

Malicious code in ethology-ophiuchus-slidev-markdown-pdf npm...

EUVD-2025-179726

Malicious code in cladistics-markdown-pdf-helmet-betelgeuse npm...

EUVD-2025-178242

Malicious code in jupiter-aether-markdown-pdf-websockets npm...

EUVD-2025-177948

Malicious code in markdown-pdf-mdx-build-config npm...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Save as PDF Button plugin <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Save as PDF Button versions = 1.9.2...

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

CVE-2025-8397: Improper Neutralization of Input During Web Page Generation

The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...