MAL-2025-19454 Malicious code in electron-prettier-plugin-markdown-framework-telesto (npm)

The package electron-prettier-plugin-markdown-framework-telesto was found to contain malicious code...

MAL-2025-25939 Malicious code in markdown-izar-blazar-halley (npm)

The package markdown-izar-blazar-halley was found to contain malicious code...

MAL-2025-29626 Malicious code in prettier-plugin-markdown-chakra-ui-mocha-janus (npm)

The package prettier-plugin-markdown-chakra-ui-mocha-janus was found to contain malicious code...

MAL-2025-18673 Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm)

The package dotenv-safe-winston-dotenv-safe-markdown-pdf was found to contain malicious code...

MAL-2025-19659 Malicious code in enif-eclipse-markdown-pdf-phoebe (npm)

The package enif-eclipse-markdown-pdf-phoebe was found to contain malicious code...

MAL-2025-32354 Malicious code in rollup-development-vega-prettier-plugin-markdown (npm)

The package rollup-development-vega-prettier-plugin-markdown was found to contain malicious code...

MAL-2025-19846 Malicious code in eslint-jabbah-europa-markdown (npm)

The package eslint-jabbah-europa-markdown was found to contain malicious code...

MAL-2025-39097 Malicious code in wezen-rimraf-markdown-hexo (npm)

The package wezen-rimraf-markdown-hexo was found to contain malicious code...

MAL-2025-29136 Malicious code in phoebe-dotenv-safe-markdown-init (npm)

The package phoebe-dotenv-safe-markdown-init was found to contain malicious code...

MAL-2025-29629 Malicious code in prettier-plugin-markdown-server-grunt-supercluster (npm)

The package prettier-plugin-markdown-server-grunt-supercluster was found to contain malicious code...

MAL-2025-17738 Malicious code in cryptography-markdown-neutronstar-configstore (npm)

The package cryptography-markdown-neutronstar-configstore was found to contain malicious code...

MAL-2025-18672 Malicious code in dotenv-safe-titan-terser-markdown (npm)

The package dotenv-safe-titan-terser-markdown was found to contain malicious code...

MAL-2025-15077 Malicious code in australis-nightwatch-prettier-plugin-markdown-tectonophysics (npm)

The package australis-nightwatch-prettier-plugin-markdown-tectonophysics was found to contain malicious code...

MAL-2025-33737 Malicious code in speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)

The package speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown was found to contain malicious code...

Malicious code in mdx-async-markdown-pdf-kardashevscale (npm)

The package mdx-async-markdown-pdf-kardashevscale was found to contain malicious code...

MAL-2025-19660 Malicious code in enif-markdown-pdf-mantle-boson (npm)

The package enif-markdown-pdf-mantle-boson was found to contain malicious code...

MAL-2025-25938 Malicious code in markdown-it-embed (npm)

The package markdown-it-embed was found to contain malicious code...

Malicious code in commitlint-equinox-markdown-pdf-draco (npm)

The package commitlint-equinox-markdown-pdf-draco was found to contain malicious code...

Cross-site Scripting (XSS)

Apache JSPWiki is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient sanitization of wiki markup and markdown header link creation because specially crafted input can execute JavaScript in the victim’s browser, enabling theft of sensitive information...

GitLab 13.2 < 18.0.6 / 18.1 < 18.1.4 / 18.2 < 18.2.2 (CVE-2025-2937)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial o...