208 matches found
@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.35), @142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25) +131 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)
mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.1-alpha.19, =0.0.0, =1.1.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.7.9, =0.16.0, =0.35.0, =1.0.3 and more Source cves: CVE-2026-71439 Source advisory: OSV:GHSA-RHH3-JPG6-66XH...
Malicious code in delphinus-vuepress-antares-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175682
Malicious code in vuepress-toml-magellan-rimraf npm...
EUVD-2025-175572
Malicious code in weywot-resolvers-vuepress-rollup npm...
EUVD-2025-177247
Malicious code in perseus-vuepress-hydra-backend npm...
EUVD-2025-177955
Malicious code in markdown-multiverse-vuepress-geoarchaeology npm...
EUVD-2025-176048
Malicious code in taurus-firebase-vuepress-uninstall npm...
EUVD-2025-175687
Malicious code in vuepress-auth0-meteor-duplex npm...
Malicious code in vuepress-auth0-meteor-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3abd4857b3587cf1ea5f38d4882fcf6ee464d5b448188b97a37f8487635164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177214
Malicious code in phoebe-borealis-vuepress-coronalmassejection npm...
EUVD-2025-176965
Malicious code in proxima-dagda-tethys-vuepress npm...
EUVD-2025-179556
Malicious code in corvus-vuepress-concurrently-elara npm...
Malicious code in nightwatch-despina-markdownlint-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44502040d19cb4dbd84126a7c87376af47cf77390d793828e5e985b8da2e06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parsec-barnard-indus-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179615
Malicious code in concurrently-grus-vuepress-zenith npm...
Malicious code in perseus-vuepress-hydra-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48f0d7a8566a862bfe61b11b8118fdb2cbf0957a5ccfa1f8038789745cb5a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175390
Malicious code in zooarchaeology-gammarayburst-blueshift-vuepress npm...
EUVD-2025-175543
Malicious code in winston-jwt-vuepress-prettier npm...