253 matches found
Malicious code in async-phenomic-cygnus-markdown-pdf (npm)
Source: amazon-inspector 942ad617f9c6e35ff392813ea91ecd284c56b5f8e7d3beddf9829e2d1e25e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in antares-interstellarmedium-biohacking-markdown-pdf (npm)
The package antares-interstellarmedium-biohacking-markdown-pdf was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in andromeda-markdown-pdf-loglevel-bellatrix (npm)
Source: amazon-inspector c1022d30d17df30a59e7919fbc13c80d55980698812493846073dc6a911a8912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in aether-dione-test-markdown-pdf (npm)
Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
CVE-2026-27625
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...
CVE-2026-27625: Improper Limitation of a Pathname to a Restricted Directory
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...
Malicious code in aether-dione-test-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180499
Malicious code in aether-dione-test-markdown-pdf npm...
Malicious code in cassini-markdown-pdf-fork-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187880 Malicious code in luna-sequelize-markdown-pdf-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816ece07571d3eee4e7cb9bac7ec4cbac325b184558f6366f6bea764c321333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177804
Malicious code in miranda-markdown-pdf-rate-limiter-graphql npm...
EUVD-2025-177389
Malicious code in package-process-helios-markdown-pdf npm...
EUVD-2025-176638
Malicious code in rigel-markdown-pdf-jsonp-restart npm...
EUVD-2025-176630
Malicious code in rimraf-markdown-markdown-pdf-biomimicry npm...