10 matches found
MAL-2025-190821 Malicious code in @quick-start-soft/quick-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca1d035d2df4ccdc9ea1fc08b5a04c8aa2708547726e92b9ba4138764427ee8 The package @quick-start-soft/quick-markdown was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-177954
Malicious code in markdown-nconf-string-xerxes npm...
EUVD-2025-122753
Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown npm...
EUVD-2025-121476
Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown npm...
EUVD-2025-111435
Malicious code in markdown-async-chai-uninstall npm...
EUVD-2025-113629
Malicious code in figures-semantic-ui-cypress-prettier-plugin-markdown npm...
EUVD-2025-120985
Malicious code in umbriel-install-cygnus-markdown npm...
EUVD-2025-123444
Malicious code in prettier-plugin-markdown-browserify-link-radiant npm...
MAL-2025-25947 Malicious code in markdown-subscription-achernar-glaciology (npm)
The package markdown-subscription-achernar-glaciology was found to contain malicious code...
Regular Expression Denial of Service (ReDoS)
Overview markdown is a yet another markdown parser, this time for JavaScript. Note: This package is no longer actively maintained and should be considered deprecated. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. It is possible under certain...