6291 matches found
Malicious code in markdown-pdf-frontend-rimraf-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123434
Malicious code in prettier-plugin-markdown-miranda-firebase-ariel npm...
EUVD-2025-120950
Malicious code in unuk-despina-webdriver-manager-markdown-pdf npm...
EUVD-2025-115805
Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown npm...
EUVD-2025-112958
Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...
EUVD-2025-123061
Malicious code in puppeteer-prettier-plugin-markdown-loop-iota npm...
Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123436
Malicious code in prettier-plugin-markdown-indus-wasat-leda npm...
Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121920
Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...
EUVD-2025-114380
Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...
EUVD-2025-114421
Malicious code in dorado-ignite-kronos-prettier-plugin-markdown npm...
EUVD-2025-115262
Malicious code in colors-csrf-rollup-prettier-plugin-markdown npm...
EUVD-2025-121475
Malicious code in tailwindcss-sass-loader-markdown-odin npm...
MAL-2025-144768 Malicious code in mdx-markdown-less-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144539 Malicious code in loop-xerxes-markdown-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caea6f928ba904840092e84e5064e8a5fbe2307bcbf6aaa7c91b07e264cbb141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147572 Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...