6305 matches found
MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149165 Malicious code in virgo-proxima-markdown-pdf-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f219bc0b48937bf3537bcbb91d9f436e7399d6db994afe3b12ca393ab705e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123687
Malicious code in pino-pretty-hapi-solis-markdown-pdf npm...
MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115498
Malicious code in chakra-ui-comet-style-loader-markdown npm...
EUVD-2025-116132
Malicious code in betelgeuse-betelgeuse-markdown-pdf-wezen npm...
EUVD-2025-111620
Malicious code in local-registry-vega-prettier-plugin-markdown npm...
MAL-2025-141887 Malicious code in elara-prettier-plugin-markdown-figures-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4287722d3e59d155f6cc47ce25f67e37f2fcc76a23ef7370d24188884c827b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144768 Malicious code in mdx-markdown-less-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144539 Malicious code in loop-xerxes-markdown-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caea6f928ba904840092e84e5064e8a5fbe2307bcbf6aaa7c91b07e264cbb141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144150 Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143629 Malicious code in init-postcss-markdown-pdf-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...