MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145087 Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146488 Malicious code in prettier-plugin-markdown-miranda-firebase-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331c4c89f4f2e753d5a57fadecfece35c8c7ebbf0f40364c1598ac968cb67f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146527 Malicious code in prettier-yaml-commitlint-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84197f8f3211ebef49ce9b3018f98351e783404d7aee0a1de774671d75066fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146474 Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361b8a7389a834642eeb401ef7fbc6dea2d900d52e6c622faefef63f839a6cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146480 Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3139efe2b8fe49fc17c17202dd196338965628ff711b11f0d0b1c4e1727266a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115040

Malicious code in convict-atlas-ophiuchus-prettier npm...

EUVD-2025-115607

Malicious code in castor-yonder-prettier-plugin-markdown-kronos npm...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144550 Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ff5e2656ce3b451ff360f78a67acd91fc9c21a7247fe942f1717f1b59d72de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146494 Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skyscanner-with-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ee691d4871e49dccfe0f756848ea5ef13360c6ff86d64bc7ddb718ac5d423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49041 Malicious code in skyscanner-with-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ee691d4871e49dccfe0f756848ea5ef13360c6ff86d64bc7ddb718ac5d423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview skyscanner-with-prettier is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...