
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@ckeditor/ckeditor5-remove-format
Advanced tools
@ckeditor/ckeditor5-remove-format is a plugin for CKEditor 5 that allows users to remove formatting from selected text. This can be particularly useful in rich text editors where users may want to clear styles and formatting applied to text, reverting it to plain text.
Remove Formatting
This feature allows users to remove all formatting from the selected text. The code sample demonstrates how to integrate the RemoveFormat plugin into a CKEditor 5 instance and add the 'removeFormat' button to the toolbar.
ClassicEditor.create(document.querySelector('#editor'), { plugins: [ RemoveFormat ], toolbar: [ 'removeFormat' ] })
Quill is a modern WYSIWYG editor built for compatibility and extensibility. It includes a 'clean' feature that removes all formatting from the selected text, similar to @ckeditor/ckeditor5-remove-format. However, Quill is a standalone editor and not a plugin for CKEditor.
TinyMCE is another popular rich text editor that offers a 'removeformat' command to clear formatting from selected text. Like Quill, TinyMCE is a full-featured editor and not a plugin for CKEditor, but it provides similar functionality for removing text formatting.
This package implements remove format support for CKEditor 5.
This plugin is part of the ckeditor5
package. Install the whole package to use it.
npm install ckeditor5
If you want to check full CKEditor 5 capabilities, sign up for a free non-commitment 14-day trial.
Check out the demo in the remove formatting feature guide.
See the @ckeditor/ckeditor5-remove-format
package page in CKEditor 5 documentation.
Licensed under a dual-license model, this software is available under:
For more information, see: https://ckeditor.com/legal/ckeditor-licensing-options.
46.0.3 (September 3, 2025)
A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 clipboard package (CVE-2025-58064
). This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert malicious content into the editor, which might happen with a very specific editor configuration.
This vulnerability affects only installations where the editor configuration meets one of the following criteria:
You can read more details in the relevant security advisory and contact us if you have more questions.
Check out the Versioning policy guide for more information.
<details> <summary>Released packages (summary)</summary>Other releases:
FAQs
Remove format feature for CKEditor 5.
We found that @ckeditor/ckeditor5-remove-format demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.