EUVD-2025-176638

Malicious code in rigel-markdown-pdf-jsonp-restart npm...

EUVD-2025-178058

Malicious code in lithosphere-markdown-pdf-winston-neptune npm...

EUVD-2025-178631

Malicious code in gulp-javascript-carpo-markdown-pdf npm...

EUVD-2025-177389

Malicious code in package-process-helios-markdown-pdf npm...

EUVD-2025-180499

Malicious code in aether-dione-test-markdown-pdf npm...

MAL-2025-187165 Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177952

Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin npm...

EUVD-2025-177948

Malicious code in markdown-pdf-mdx-build-config npm...

Malicious code in cassini-markdown-pdf-fork-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178002

Malicious code in luna-sequelize-markdown-pdf-meissa npm...

EUVD-2025-178521

Malicious code in higgs-markdown-pdf-kaus-helmet npm...

EUVD-2025-177804

Malicious code in miranda-markdown-pdf-rate-limiter-graphql npm...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179726

Malicious code in cladistics-markdown-pdf-helmet-betelgeuse npm...

EUVD-2025-178086

Malicious code in link-slidev-dione-markdown-pdf npm...

MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Save as PDF Button plugin <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Save as PDF Button versions = 1.9.2...

WordPress plugin Save as PDF Button 跨站脚本漏洞

The WordPress Save as PDF Button plugin is a tool that adds one-click PDF generation functionality to WordPress websites, allowing visitors to save web content e.g., articles, product pages, etc. as PDF files with the click of a button. WordPress Save as PDF Button plugin has a cross-site scripti...

PT-2025-46794

Name of the Vulnerable Software and Affected Versions Save as PDF Button plugin for WordPress versions prior to 1.9.3 Description The software has a flaw due to insufficient input sanitization and output escaping on user-supplied attributes within the restpackpdfbutton shortcode. This allows...

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...