MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146197 Malicious code in phoenix-json-markdown-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7880f03c4f17c08b093bf7dfcb7a59a5ad90b3d3c77a715a8a9bc408fd2ca56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141174 Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf8ae7c3b97e5730c7960388b097334d80efc91837176e1b7c2388bf92756c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124361

Malicious code in nodejs-cygnus-sync-markdown-pdf npm...

MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148001 Malicious code in slidev-config-prettier-plugin-markdown-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e834e497b6d587ec03ff3266acade36150e5844f41ba3cf81c5e4d8bed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123423

Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...

EUVD-2025-121920

Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...

EUVD-2025-116841

Malicious code in airbnb-prettier-plugin-markdown-envconfig-helmet npm...

MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146494 Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144768 Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144550 Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ff5e2656ce3b451ff360f78a67acd91fc9c21a7247fe942f1717f1b59d72de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144356 Malicious code in levels-markdown-cli-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147572 Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue in k8s proxy impacts GitLab CE/EE Incorrect Authorization issue in workflows impacts GitLab EE Information Disclosure issue in GraphQL subscriptions impacts GitLab CE/EE Information Disclosure issue in access control impacts GitLab CE/EE Prompt Injection...