EUVD-2025-113527

Malicious code in fork-deneb-markdownlint-child-process npm...

MAL-2025-142585 Malicious code in fork-deneb-markdownlint-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93b7930e02ad6837f30249a13d5e8d223ae7bce1c99c7df9c99223d8c22ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113728

Malicious code in express-markdownlint-koa-deneb npm...

Malicious code in virgo-nuxtjs-markdownlint-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456efc4ea80f59d38ec571a75a5f9b728150a46429cd2c67f7950fe7eaeb3262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141101 Malicious code in cordelia-markdownlint-vuetify-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16996f535c5075c1e842c66c5c0cb060e543b2870253fb635734319b4c397a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141836 Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144934 Malicious code in meteor-sedna-markdownlint-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24b23272bb9a9b6fe57ada512032b74918ee0417d5834f858230c532e1bc667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146255 Malicious code in pino-venus-markdownlint-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04621dacd067130e824c714fe59657f902386c209fa4dd53cb3a8325a2af3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144721 Malicious code in markdownlint-antares-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144731 Malicious code in markdownlint-start-materialize-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b86e7289af41e3713ee478fd25844f6004df8c4ad8c5ecdc276dcd607a7588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149421 Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144729 Malicious code in markdownlint-solis-fornax-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d338c1f227a98f6e8b14c4ecab4ef110908f22f983d218d1b67e36623f855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147526 Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141110 Malicious code in cordelia-sirius-markdownlint-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bf7ac8e53cfb963f4716c2a371204c3055919800eccfbb8b4992bc33d0147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140831 Malicious code in cluster-markdownlint-equinox-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c171761f3cbbf27925b3aaa8a534f93727568b8a0eb9097d587828f151e01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...