@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)

@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...

@datalayer/jupyter-react (>=0.4.0, <=0.9.5) potentially affected by CVE-2025-59842 via @jupyterlab/mathjax-extension (>=4.0.0, <=4.1.0-beta.0)

@jupyterlab/mathjax-extension NPM version =4.0.0, =0.4.0, =0.9.5 Source cves: CVE-2025-59842 Source advisory: MEND:CVE-2025-59842...

MAL-2025-8413 Malicious code in @leaffm/leafconnect-datalayer (npm)

The package @leaffm/leafconnect-datalayer was found to contain malicious code...

Malicious code in @leaffm/leafconnect-datalayer (npm)

The package @leaffm/leafconnect-datalayer was found to contain malicious code...

Malicious code in fc-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efc4af922782366d3c733de924288acf41095420980f9735a72d0012e271785 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2981 Malicious code in fc-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efc4af922782366d3c733de924288acf41095420980f9735a72d0012e271785 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2989 Malicious code in fe-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8575029c8170302c57286bcf94e6258c9dd4ece53a9482f3d22b465d90993ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8575029c8170302c57286bcf94e6258c9dd4ece53a9482f3d22b465d90993ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...