EUVD-2025-111351

Malicious code in mdx-cressida-ini-async npm...

EUVD-2025-114874

Malicious code in cressida-ini-markdownlint-yakutsk npm...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...