208 matches found
@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.27), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)
mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71439 Source advisory: OSV:GHSA-RHH3-JPG6-66XH...
EUVD-2025-175543
Malicious code in winston-jwt-vuepress-prettier npm...
Malicious code in vuepress-toml-magellan-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73486af759f7bf45f85de2534aee0ca48048d4c03aafacd5b532d679496ef3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in corvus-vuepress-concurrently-elara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179615
Malicious code in concurrently-grus-vuepress-zenith npm...
EUVD-2025-175688
Malicious code in vuepress-apollo-kuiperbelt-hercules npm...
EUVD-2025-177600
Malicious code in nightwatch-despina-markdownlint-vuepress npm...
Malicious code in parsec-barnard-indus-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190188 Malicious code in vuepress-apollo-kuiperbelt-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4173383d800b1607f50cc0cf3319b90bfd620b0d00175aab6683c57b5f9471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190304 Malicious code in weywot-resolvers-vuepress-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdb11770ab86d295bfb45a4a377949b744a249875509122d45dee4c8f543e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190191 Malicious code in vuepress-mineralogy-aldebaran-taphonomy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a174c9530c0b8fe98c44cdccf1bfa383d150ed11c2a1dec533c5293ae03557d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186326 Malicious code in corvus-vuepress-concurrently-elara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175681
Malicious code in vuepress-update-canopus-zooarchaeology npm...
Malicious code in vuepress-auth0-meteor-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3abd4857b3587cf1ea5f38d4882fcf6ee464d5b448188b97a37f8487635164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175684
Malicious code in vuepress-parallax-socketio-juno npm...
EUVD-2025-179556
Malicious code in corvus-vuepress-concurrently-elara npm...
EUVD-2025-175682
Malicious code in vuepress-toml-magellan-rimraf npm...
EUVD-2025-177955
Malicious code in markdown-multiverse-vuepress-geoarchaeology npm...