Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10870 Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2022-1115

Malicious code in bioql PyPI...

Malware in atlaskit-registry

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in atlaskit-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a82f51289bb90a9a96816fcf188b81cd24166b48cac9cc66d28af7e68e1acc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3723 Malicious code in atlaskit-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a82f51289bb90a9a96816fcf188b81cd24166b48cac9cc66d28af7e68e1acc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlaskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53c2e76bf702d1effe3dbdd769b8d5be4ab4cf0d86dae87ff1aeb9b94e4c6f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in atlaskit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2645 Malicious code in atlaskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53c2e76bf702d1effe3dbdd769b8d5be4ab4cf0d86dae87ff1aeb9b94e4c6f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)

react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...

GHSA-P5CH-W78F-XH44 Cross-site scripting in @atlaskit/editor-core

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

Cross-site scripting in @atlaskit/editor-core

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

Cross-Site Scripting (XSS)

@atlaskit/editor-core is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the link targets...

CVE-2019-20903

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

CVE-2019-20903

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

Cross site scripting

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

CVE-2019-20903

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

CVE-2019-20903

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...

PT-2020-10866

Name of the Vulnerable Software and Affected Versions atlaskit/editor-core versions prior to 113.1.5 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets, specifically in the hyperlinks functionality...

CVE-2019-20903: Improper Neutralization of Input During Web Page Generation

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in link targets...