A responsible security disclosure for the Syntax Highlight plugin: github.com/11ty/elevent...

Due to quick action by npm and good granular access security policy there was no impact and no action is necessary.