EUVD-2025-120052

Malicious code in zephyr-arcturus-venus-markdown-pdf npm...

EUVD-2025-123159

Malicious code in public-npm-leda-prettier-plugin-markdown npm...

EUVD-2025-111420

Malicious code in markdown-pdf-mocha-lynx-nightwatch npm...

EUVD-2025-111417

Malicious code in markdown-pdf-oberon-rest-atlas npm...

EUVD-2025-121917

Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...

EUVD-2025-111415

Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142531 Malicious code in flare-markdown-nuxtjs-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad6874c7e2400099e1265a13d17d1878923c6efc8c4f2ab254726f668d03798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122562

Malicious code in rest-pegasus-miranda-markdown npm...

MAL-2025-147572 Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139912 Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144356 Malicious code in levels-markdown-cli-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111401

Malicious code in markdown-prompts-pegasus-sirius npm...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...