Malicious code in mdx-geckodriver-cypress-levels (npm)

The package mdx-geckodriver-cypress-levels was found to contain malicious code...

Malicious code in mdx-oauth-google-quark (npm)

The package mdx-oauth-google-quark was found to contain malicious code...

Malicious code in altair-prettier-stylelint-mdx-aurora (npm)

The package altair-prettier-stylelint-mdx-aurora was found to contain malicious code...

Malicious code in carina-kardashevscale-mdx-terser (npm)

The package carina-kardashevscale-mdx-terser was found to contain malicious code...

Malicious code in mdx-async-markdown-pdf-kardashevscale (npm)

The package mdx-async-markdown-pdf-kardashevscale was found to contain malicious code...

Malicious code in solarnebula-exoplanet-mdx-australis (npm)

The package solarnebula-exoplanet-mdx-australis was found to contain malicious code...

MAL-2025-26868 Malicious code in mui-jupiter-mdx-supercluster (npm)

The package mui-jupiter-mdx-supercluster was found to contain malicious code...

Malicious code in grunt-mdx-upgrade-rollup (npm)

The package grunt-mdx-upgrade-rollup was found to contain malicious code...

MAL-2025-29469 Malicious code in polaris-chromedriver-mdx-pegasus (npm)

The package polaris-chromedriver-mdx-pegasus was found to contain malicious code...

Malicious code in mui-jupiter-mdx-supercluster (npm)

The package mui-jupiter-mdx-supercluster was found to contain malicious code...

MAL-2025-26075 Malicious code in mdx-oauth-google-quark (npm)

The package mdx-oauth-google-quark was found to contain malicious code...

MAL-2025-14406 Malicious code in altair-prettier-stylelint-mdx-aurora (npm)

The package altair-prettier-stylelint-mdx-aurora was found to contain malicious code...

MAL-2025-21995 Malicious code in grunt-mdx-upgrade-rollup (npm)

The package grunt-mdx-upgrade-rollup was found to contain malicious code...

MAL-2025-32894 Malicious code in sedimentology-mdx-rigel-planetology (npm)

The package sedimentology-mdx-rigel-planetology was found to contain malicious code...

MAL-2025-16554 Malicious code in carina-kardashevscale-mdx-terser (npm)

The package carina-kardashevscale-mdx-terser was found to contain malicious code...

MAL-2025-26074 Malicious code in mdx-geckodriver-cypress-levels (npm)

The package mdx-geckodriver-cypress-levels was found to contain malicious code...

MAL-2025-26073 Malicious code in mdx-async-markdown-pdf-kardashevscale (npm)

The package mdx-async-markdown-pdf-kardashevscale was found to contain malicious code...

CVE-2024-6639

The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdxlistitem' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

CVE-2022-36036

mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was...

CVE-2024-6639

The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdxlistitem' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...