MAL-2025-144150 Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143629 Malicious code in init-postcss-markdown-pdf-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-tool-markdown-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123815

Malicious code in perseus-prettier-plugin-markdown-astro-commitizen npm...

EUVD-2025-112923

Malicious code in hapi-markdown-dotenv-spinner npm...

EUVD-2025-124189

Malicious code in oauth-gatsby-titan-markdown-pdf npm...

MAL-2025-140513 Malicious code in celeste-markdown-event-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e717a25dbea8f02ee1d1fa07e2a1e6f816a3ed3b0265bb160bd0492dfad644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146903 Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145962 Malicious code in parcel-luna-markdown-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb3d20e200dc928732cdc59fb78acbb70d21a7cfd2dd6a163370111f47d39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147325 Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149165 Malicious code in virgo-proxima-markdown-pdf-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f219bc0b48937bf3537bcbb91d9f436e7399d6db994afe3b12ca393ab705e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146473 Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124fae100d834ecd38af354ea48768894dc6d768b217b345c0026ce633a24f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144710 Malicious code in markdown-pdf-wasat-luna-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecd59731081ac14a1d7e6bf85ea26c4a0b8aca42f3e976b461463c99dc87512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...