EUVD-2025-123435

Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides npm...

EUVD-2025-123449

Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf npm...

MAL-2025-148452 Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f082e8e688e52330227d64ed4159b14898c0941aa30e28c8b117a0b64445ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123662

Malicious code in pipe-await-got-prettier-plugin-markdown npm...

EUVD-2025-123442

Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth npm...

EUVD-2025-122514

Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork npm...

EUVD-2025-112506

Malicious code in ini-sirius-ursa-prettier-plugin-markdown npm...

EUVD-2025-123424

Malicious code in prettier-plugin-markdown-winston-phenomic-airbnb npm...

EUVD-2025-111620

Malicious code in local-registry-vega-prettier-plugin-markdown npm...

EUVD-2025-122503

Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown npm...

EUVD-2025-121480

Malicious code in tailwindcss-morgan-xenon-prettier-plugin-markdown npm...

EUVD-2025-114867

Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa npm...

EUVD-2025-123436

Malicious code in prettier-plugin-markdown-indus-wasat-leda npm...

EUVD-2025-114707

Malicious code in cypress-nashira-configstore-prettier-plugin-markdown npm...

EUVD-2025-122351

Malicious code in sadr-prettier-plugin-markdown-carpo-husky npm...

EUVD-2025-123429

Malicious code in prettier-plugin-markdown-rocket-jwt-spica npm...

EUVD-2021-0505

Malware in sbrugna...

EUVD-2025-31581

Malicious code in bioql PyPI...

CVE-2025-59940

mkdocs-include-markdown-plugin (MkDocs) is affected in versions 7.1.7 and earlier due to unvalidated input colliding with substitution placeholders. The issue is resolved in version 7.1.8. Fedora advisories reference the same CVE-2025-59940 remediation. Impact details in the provided documents in...

CVE-2025-59940 mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8...