[SECURITY] Fedora 43 Update: markdownlint-cli2-0.23.3-1.fc43

A fast, flexible, configuration-based command-line interface for linting Markdown/CommonMark files with the markdownlint library...

[SECURITY] Fedora 44 Update: markdownlint-cli2-0.23.3-1.fc44

A fast, flexible, configuration-based command-line interface for linting Markdown/CommonMark files with the markdownlint library...

Fedora 43 : markdownlint-cli2 (2026-af15ed670a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-af15ed670a advisory. Update ---- CVE fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 44 : markdownlint-cli2 (2026-2c004657ff)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2c004657ff advisory. Update ---- CVE fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Malicious code in lint-markdownlint-sedimentology-winston (npm)

Source: amazon-inspector b3988062919a9abd332f549c6b5dfa72ef0d2b139a5d3835f23cb90198c6d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kinetic-typeorm-less-loader-markdownlint (npm)

Source: amazon-inspector 86bc60e05545183c56410196c269e61c5cbeceed7207842d9ff6bfa7a03d3050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kinetic-mocha-markdownlint-avior (npm)

Source: amazon-inspector 9c2b8b3cd3c7b00eae9c1f8ce3ab2c5018b3bfc08a10b12045b903c81d64c2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jwt-markdownlint-chakra-ui-sadr (npm)

Source: amazon-inspector 98adbed07bb475f9b35b6365bf0378288afb41ce3b83103091d7ae6a53b40bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jest-solis-aldebaran-markdownlint (npm)

Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jekyll-markdownlint-leda-phoenix (npm)

Source: amazon-inspector e4268ead218f453ec80bdbf052e30a015e7a56001c5719e42c62cbda3354e2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in janus-ophiuchus-markdownlint-indus (npm)

Source: amazon-inspector 7b9ac8cc683427a074124be21bbbbc3bf4c8fd07002d601cea16482cd45c5c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in init-hugo-markdownlint-hydra (npm)

Source: amazon-inspector b9b9c9c533b3e13f12e53eacc434f17f1733e0a4fa8bff7628a7329b9850c9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm)

Source: amazon-inspector 03b436a9cc16222004be7b8cc0ef69d75750e55eaa73be4c230dc3ee4756c09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heka-markdownlint-rollup-node-config (npm)

Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-ophiuchus-markdownlint-figures (npm)

Source: amazon-inspector 3607655a9434cf502c2fa60318a5328e80964eb1e771161aa48914888bf2f2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-concurrently-markdownlint-ceres (npm)

Source: amazon-inspector 967406994297f477ec4001272a2beec41ae29e16ba0f0c229bb246f1ce5bbd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in express-markdownlint-koa-deneb (npm)

Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in express-auth-registry-markdownlint (npm)

Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

Source: amazon-inspector a9581fff270fca351536c9fc917d7d441c7165b0aafae91631d5fa9c002c18fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in element-ui-luna-betelgeuse-markdownlint (npm)

Source: amazon-inspector 0b2fa7918448fccb2d3813a943600f31453a2259a8ee9151f0ecf849537539d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...