207 matches found
CVE-2026-27625: Improper Limitation of a Pathname to a Restricted Directory
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...
EUVD-2025-176638
Malicious code in rigel-markdown-pdf-jsonp-restart npm...
EUVD-2025-177952
Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177950
Malicious code in markdown-pdf-draco-kuiperbelt-tethys npm...
EUVD-2025-179726
Malicious code in cladistics-markdown-pdf-helmet-betelgeuse npm...
EUVD-2025-177389
Malicious code in package-process-helios-markdown-pdf npm...
EUVD-2025-176630
Malicious code in rimraf-markdown-markdown-pdf-biomimicry npm...
EUVD-2025-178717
Malicious code in geodynamo-stop-hexo-markdown-pdf npm...
Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179023
Malicious code in ethology-ophiuchus-slidev-markdown-pdf npm...
EUVD-2025-177949
Malicious code in markdown-pdf-jsonp-brane-cross-env npm...
EUVD-2025-178086
Malicious code in link-slidev-dione-markdown-pdf npm...
Malicious code in aether-dione-test-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177804
Malicious code in miranda-markdown-pdf-rate-limiter-graphql npm...
EUVD-2025-180499
Malicious code in aether-dione-test-markdown-pdf npm...
Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cassini-markdown-pdf-fork-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...