Malicious code in docusaurus-cladistics-version-lacerta (npm)

The package docusaurus-cladistics-version-lacerta was found to contain malicious code...

Malicious code in prettier-unuk-genomics-docusaurus (npm)

The package prettier-unuk-genomics-docusaurus was found to contain malicious code...

MAL-2025-31089 Malicious code in quantumfoam-docusaurus-configstore-zenobia (npm)

The package quantumfoam-docusaurus-configstore-zenobia was found to contain malicious code...

MAL-2025-38691 Malicious code in vulcan-docusaurus-quark-mineralogy (npm)

The package vulcan-docusaurus-quark-mineralogy was found to contain malicious code...

MAL-2025-18579 Malicious code in docusaurus-cladistics-version-lacerta (npm)

The package docusaurus-cladistics-version-lacerta was found to contain malicious code...

Malicious code in meissa-firebase-equinox-docusaurus (npm)

The package meissa-firebase-equinox-docusaurus was found to contain malicious code...

MAL-2025-18578 Malicious code in docusaurus-atlas-pm2-norma (npm)

The package docusaurus-atlas-pm2-norma was found to contain malicious code...

MAL-2025-18582 Malicious code in docusaurus-oberon-test-concurrently (npm)

The package docusaurus-oberon-test-concurrently was found to contain malicious code...

MAL-2025-33313 Malicious code in sirius-dione-sqlite-docusaurus (npm)

The package sirius-dione-sqlite-docusaurus was found to contain malicious code...

MAL-2025-25176 Malicious code in less-loader-colors-nashira-docusaurus (npm)

The package less-loader-colors-nashira-docusaurus was found to contain malicious code...

Malicious code in docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6714 Malicious code in docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ifood-docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6728 Malicious code in ifood-docusaurus-theme (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53624

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

GitHub Personal Access Token Exposure in docusaurus-plugin-content-gists Summary docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for...

GHSA-QF34-QPR4-5PPH docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

GitHub Personal Access Token Exposure in docusaurus-plugin-content-gists Summary docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for...

CVE-2025-53624

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

CVE-2025-53624

The CVE-2025-53624 entry concerns the Docusaurus plugin docusaurus-plugin-content-gists. Versions prior to 4.0.0 are vulnerable because a GitHub Personal Access Token passed via plugin configuration could be exposed in production build artifacts, embedding the token in client-side JavaScript bund...

CVE-2025-53624 docusaurus-plugin-content-gists Exposes GitHub Personal Access Token

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...