Malicious Package

Overview markdownlint-rule-link-pattern is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

MAL-2026-2633 Malicious code in markdownlint-rule-link-pattern (npm)

Malicious package due to data exfiltration via preinstall, test and preupdate scripts using wget to send user, path, and hostname to a remote server. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5ffad19a9d8a62d1ee2a266767e609ffeba74597b50248d751b28cdffae844...

Malicious code in markdownlint-rule-link-pattern (npm)

Malicious package due to data exfiltration via preinstall, test and preupdate scripts using wget to send user, path, and hostname to a remote server. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5ffad19a9d8a62d1ee2a266767e609ffeba74597b50248d751b28cdffae844...

MAL-2025-191516 Malicious code in markdownlint-cli2-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655d6053e439a95c848bd57cd41cba21de94f230903346b885b527082e131915 The package markdownlint-cli2-action was found to contain malicious code...

Malicious code in markdownlint-cli2-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655d6053e439a95c848bd57cd41cba21de94f230903346b885b527082e131915 The package markdownlint-cli2-action was found to contain malicious code...

EUVD-2025-200053

Malicious code in markdownlint-cli2-action npm...

EUVD-2025-175738

Malicious code in venus-dactyl-publish-markdownlint npm...

EUVD-2025-178484

Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin npm...

EUVD-2025-176765

Malicious code in redis-markdownlint-meteor-winston npm...

EUVD-2025-177944

Malicious code in markdownlint-rollup-loglevel-toml npm...

Malicious code in nightwatch-despina-markdownlint-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44502040d19cb4dbd84126a7c87376af47cf77390d793828e5e985b8da2e06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180471

Malicious code in aldebaran-markdownlint-phoebe-cordelia npm...

EUVD-2025-177291

Malicious code in pavo-xenon-markdownlint-enceladus npm...

EUVD-2025-175530

Malicious code in writable-jovian-pino-markdownlint npm...

EUVD-2025-175978

Malicious code in testcafe-markdownlint-antares-jsonp npm...

EUVD-2025-175521

Malicious code in xanthus-dotenv-safe-markdownlint-xerxes npm...

EUVD-2025-179181

Malicious code in electron-builder-pipe-markdownlint-nextjs npm...

EUVD-2025-177600

Malicious code in nightwatch-despina-markdownlint-vuepress npm...

EUVD-2025-178577

Malicious code in heka-markdownlint-rollup-node-config npm...

MAL-2025-189864 Malicious code in terser-antares-markdownlint-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63d74fa8c6808e660d5a31301107399d05e75ae04fa9ca5c2fc86eb0c04f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...