EUVD-2025-120655

Malicious code in warp-protractor-jsonp-prettier-plugin-markdown npm...

EUVD-2025-123662

Malicious code in pipe-await-got-prettier-plugin-markdown npm...

MAL-2025-148452 Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f082e8e688e52330227d64ed4159b14898c0941aa30e28c8b117a0b64445ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123449

Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf npm...

EUVD-2025-121480

Malicious code in tailwindcss-morgan-xenon-prettier-plugin-markdown npm...

EUVD-2025-122351

Malicious code in sadr-prettier-plugin-markdown-carpo-husky npm...

EUVD-2025-114707

Malicious code in cypress-nashira-configstore-prettier-plugin-markdown npm...

EUVD-2025-123429

Malicious code in prettier-plugin-markdown-rocket-jwt-spica npm...

EUVD-2025-123436

Malicious code in prettier-plugin-markdown-indus-wasat-leda npm...

EUVD-2025-123424

Malicious code in prettier-plugin-markdown-winston-phenomic-airbnb npm...

EUVD-2025-112506

Malicious code in ini-sirius-ursa-prettier-plugin-markdown npm...

EUVD-2025-114867

Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa npm...

EUVD-2025-122503

Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown npm...

EUVD-2025-111620

Malicious code in local-registry-vega-prettier-plugin-markdown npm...

EUVD-2021-0505

Malware in sbrugna...

EUVD-2025-31581

Malicious code in bioql PyPI...

CVE-2025-59940 mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8...

CVE-2025-59940

mkdocs-include-markdown-plugin (MkDocs) is affected in versions 7.1.7 and earlier due to unvalidated input colliding with substitution placeholders. The issue is resolved in version 7.1.8. Fedora advisories reference the same CVE-2025-59940 remediation. Impact details in the provided documents in...

CVE-2025-59940 mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8...

Improper Neutralization of Escape Characters

Overview mkdocs-include-markdown-plugin is a Mkdocs Markdown includer plugin. Affected versions of this package are vulnerable to Improper Neutralization of Escape Characters in the placeholder substitution process. An attacker can cause unintended modifications to output or disrupt application...