EUVD-2025-120897

Malicious code in upgrade-slidev-mdx-cosmos npm...

EUVD-2025-120789

Malicious code in version-mdx-development-delphinus npm...

EUVD-2025-121401

Malicious code in terser-mdx-barnard-buffer npm...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-122649

Malicious code in repository-mdx-init-xanthus npm...

EUVD-2025-122146

Malicious code in sedna-mongoose-mdx-taurus npm...

EUVD-2025-123886

Malicious code in pegasus-hydra-mdx-sagitta npm...

EUVD-2025-123567

Malicious code in polaris-mdx-pulsar-transport npm...

EUVD-2025-123453

Malicious code in prettier-ini-babel-mdx npm...

EUVD-2025-124574

Malicious code in nebula-mdx-polaris-sync npm...

EUVD-2025-124178

Malicious code in oberon-dynamo-mdx-sedna npm...

EUVD-2025-124831

Malicious code in mocha-luna-mdx-prettier npm...

EUVD-2025-122506

Malicious code in reveal-md-mdx-geckodriver-callback npm...

Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123697

Malicious code in pino-meteor-mdx-despina npm...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144776 Malicious code in mdx-rimraf-subscription-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae0dfc03d7ef3da474f94bfe9820f5263c24effedec038236376a4ddf6da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143306 Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...