MAL-2025-146903 Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144539 Malicious code in loop-xerxes-markdown-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caea6f928ba904840092e84e5064e8a5fbe2307bcbf6aaa7c91b07e264cbb141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139912 Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111422

Malicious code in markdown-pdf-mdx-eclipse-hyperion npm...

MAL-2025-145748 Malicious code in oberon-materialize-markdown-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2083b4fb84ffe9e31011134778fcef6d65245910619783432fcfd3f6217af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139767 Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147360 Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142531 Malicious code in flare-markdown-nuxtjs-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad6874c7e2400099e1265a13d17d1878923c6efc8c4f2ab254726f668d03798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145962 Malicious code in parcel-luna-markdown-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb3d20e200dc928732cdc59fb78acbb70d21a7cfd2dd6a163370111f47d39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148452 Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f082e8e688e52330227d64ed4159b14898c0941aa30e28c8b117a0b64445ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...