EUVD-2025-111864

Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...

EUVD-2025-116688

Malicious code in antares-helios-umbra-prettier-plugin-markdown npm...

EUVD-2025-111287

Malicious code in meissa-prettier-plugin-markdown-celeste-vortex npm...

EUVD-2025-123358

Malicious code in process-prettier-plugin-markdown-ganymede-hydra npm...

EUVD-2025-123458

Malicious code in prettier-dagda-repository-quito npm...

EUVD-2025-121852

Malicious code in solis-forever-framework-prettier npm...

EUVD-2025-123430

Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra npm...

EUVD-2025-115567

Malicious code in centaurus-arcturus-prettier-metalsmith npm...

EUVD-2025-124601

Malicious code in nconf-hercules-prettier-stylelint-slides npm...

EUVD-2025-123406

Malicious code in prettier-stylelint-rocket-ursa-grus npm...

EUVD-2025-115353

Malicious code in child-process-prettier-stylelint-draco-vuepress npm...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145938 Malicious code in package-luna-prettier-plugin-markdown-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75efe02b19ff9ec70cbd27c5dc3b7ff7f2efe7c12ee542ff0ba4d8f933f0cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146490 Malicious code in prettier-plugin-markdown-nebula-indus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6492a83247e49f72e6921cfc3118e1d644657d0ff4c5ddedafb09ef6265249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141887 Malicious code in elara-prettier-plugin-markdown-figures-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4287722d3e59d155f6cc47ce25f67e37f2fcc76a23ef7370d24188884c827b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140709 Malicious code in chariklo-quark-middleware-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146242 Malicious code in pino-pretty-procyon-redis-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6fdc4f0dec8028c29094b0260a239dad14986697d599671509e7985d30710e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146475 Malicious code in prettier-plugin-markdown-async-taurus-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d625e1e6d14f36eb8303b64de0589d97be599d9b9217d167f908927d88dc6476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...