EUVD-2025-113298

Malicious code in ganymede-nodemon-leda-markdown-pdf npm...

MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113753

Malicious code in exec-parcel-tailwindcss-markdown npm...

EUVD-2025-115759

Malicious code in callisto-quark-electron-builder-markdown-pdf npm...

EUVD-2025-114867

Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa npm...

EUVD-2025-114204

Malicious code in electron-builder-jupiter-markdown-schema npm...

EUVD-2025-113478

Malicious code in fornax-markdown-mutation-got npm...

EUVD-2025-123423

Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...

EUVD-2025-111404

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs npm...

EUVD-2025-124025

Malicious code in ora-rest-markdown-sedna npm...

MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123337

Malicious code in procyon-css-minimizer-webpack-plugin-testcafe-markdown npm...

EUVD-2025-114935

Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager npm...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue in k8s proxy impacts GitLab CE/EE Incorrect Authorization issue in workflows impacts GitLab EE Information Disclosure issue in GraphQL subscriptions impacts GitLab CE/EE Information Disclosure issue in access control impacts GitLab CE/EE Prompt Injection...

Reverse Tabnabbing Attacks

jupyterlab is vulnerable to Reverse Tabnabbing attacks. The vulnerability is due to missing the noopener attribute in links generated by LaTeX typesetters in Markdown cells and files, which allows an attacker to exploit links with target=blank to potentially hijack the originating browser tab...

ExploitReport

The Exploit Report — Portfolio React A single-page React si...

Improper Input Validation

@digitalocean/do-markdownit is vulnerable to Improper Input Validation. The vulnerability is due to the callout and fenceenvironment plugins using .includes substring matching when allowedClasses or allowedEnvironments are strings instead of arrays, which allows an attacker to bypass intended...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.0-IF005 and 25.0.0-IF002. These vulnerabilities have been also addressed in 24.0.1-IF005. Vulnerability Details CVEID:CVE-2025-36091 DESCRIPTION: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and...

CVE-2025-54384

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.9 and 2.11.4, the helpers.markdownextract function did not perform sufficient sanitization of input data before wrapping in an HTML literal element. This helper is used to render user-provided...