EUVD-2025-116468

Malicious code in async-phenomic-cygnus-markdown-pdf npm...

Malicious code in vuetify-tool-markdown-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123691

Malicious code in pino-pretty-bunyan-aquarius-markdown npm...

EUVD-2025-120586

Malicious code in webdriver-mocha-ceres-luna-markdown-pdf npm...

Malicious code in phoenix-markdown-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdc7c89040402f84c7f588132dda2fde733d422fa806aa30af0599cd5f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123430

Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra npm...

EUVD-2025-123439

Malicious code in prettier-plugin-markdown-hermes-inquirer-rehype npm...

EUVD-2025-111989

Malicious code in kastra-nebula-markdown-delphinus npm...

EUVD-2025-116132

Malicious code in betelgeuse-betelgeuse-markdown-pdf-wezen npm...

EUVD-2025-122507

Malicious code in reveal-md-lynx-semantic-ui-mensa npm...

EUVD-2025-122894

Malicious code in rate-limiter-acamar-cache-prettier-plugin-markdown npm...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112186

Malicious code in jest-markdown-loopback-superagent npm...

EUVD-2025-115262

Malicious code in colors-csrf-rollup-prettier-plugin-markdown npm...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140513 Malicious code in celeste-markdown-event-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e717a25dbea8f02ee1d1fa07e2a1e6f816a3ed3b0265bb160bd0492dfad644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146903 Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141887 Malicious code in elara-prettier-plugin-markdown-figures-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4287722d3e59d155f6cc47ce25f67e37f2fcc76a23ef7370d24188884c827b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...