5021 matches found
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE and EE versions 16.9 through 18.3...
Improper Input Validation
mkdocs-include-markdown-plugin is vulnerable to improper input validation. The vulnerability is due to unvalidated input colliding with substitution placeholders, which allows an attacker to manipulate included Markdown content and potentially inject or alter data...
EUVD-2025-176266
Malicious code in spectron-markdown-avior-auth0 npm...
EUVD-2025-176743
Malicious code in registry-ursa-prettier-plugin-markdown-framework npm...
EUVD-2025-178636
Malicious code in grus-private-quark-prettier-plugin-markdown npm...
EUVD-2025-177221
Malicious code in phenomic-terser-markdown-archaeogenetics npm...
EUVD-2025-178915
Malicious code in figures-materialize-markdown-pdf-miranda npm...
MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175760
Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown npm...
EUVD-2025-176927
Malicious code in publish-jest-sadr-prettier-plugin-markdown npm...
EUVD-2025-178635
Malicious code in grus-prosthetics-stream-prettier-plugin-markdown npm...
EUVD-2025-178146
Malicious code in leda-loopback-markdown-pdf-quasar npm...
EUVD-2025-178480
Malicious code in hydra-markdown-pdf-resolvers-postcss npm...
EUVD-2025-179204
Malicious code in eclipse-hercules-europa-prettier-plugin-markdown npm...
Malicious code in aether-dione-test-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178717
Malicious code in geodynamo-stop-hexo-markdown-pdf npm...
EUVD-2025-175503
Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...
EUVD-2025-175775
Malicious code in uranology-less-markdown-pdf-eclipse npm...