EUVD-2025-122248

Malicious code in sass-loader-magellan-build-reveal-md npm...

EUVD-2025-122518

Malicious code in reveal-md-celeste-ariel-fornax npm...

EUVD-2025-114182

Malicious code in electron-reveal-md-gravity-puppeteer npm...

EUVD-2025-123612

Malicious code in pm2-reveal-md-event-sagitta npm...

Malicious code in alphard-cluster-reveal-md-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee22bbbe9632215a2c3c8b8578c6322a0cfb2caa0be027efb0af754d7e2e82ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124009

Malicious code in orbit-reveal-md-charon-cygnus npm...

EUVD-2025-120639

Malicious code in wasat-forever-frontend-reveal-md npm...

EUVD-2025-122516

Malicious code in reveal-md-epimetheus-impulse-procyon npm...

EUVD-2025-122986

Malicious code in quark-reveal-md-celeste-iota npm...

EUVD-2025-120042

Malicious code in zephyr-mdx-vega-reveal-md npm...

EUVD-2025-122515

Malicious code in reveal-md-flare-kastra-css-loader npm...

EUVD-2025-122506

Malicious code in reveal-md-mdx-geckodriver-callback npm...

EUVD-2025-120325

Malicious code in xanadu-postcss-slides-reveal-md npm...

EUVD-2025-122513

Malicious code in reveal-md-fork-rehype-yakutsk npm...

EUVD-2025-111717

Malicious code in link-async-global-reveal-md npm...

MAL-2025-143551 Malicious code in impulse-protractor-registry-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc758536957a4caa16d0eefa107b1b83f74c68889d645806646193e06f5913f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115793

Malicious code in callback-reveal-md-xml-shelljs npm...

EUVD-2025-122653

Malicious code in repository-less-loader-wolf-reveal-md npm...

EUVD-2025-122497

Malicious code in reveal-md-query-gemini-europa npm...

MAL-2025-146309 Malicious code in pm2-reveal-md-event-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea958e760b4bb93d44dc8d81957905e8fd0119c466631ef84e6172b11e0b8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...