EUVD-2025-114106

Malicious code in eleventy-mdx-cressida-sedna npm...

EUVD-2025-111342

Malicious code in mdx-radiant-sagitta-react-bootstrap npm...

Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-rimraf-subscription-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae0dfc03d7ef3da474f94bfe9820f5263c24effedec038236376a4ddf6da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122506

Malicious code in reveal-md-mdx-geckodriver-callback npm...

EUVD-2025-111422

Malicious code in markdown-pdf-mdx-eclipse-hyperion npm...

EUVD-2025-116042

Malicious code in blitz-solis-mdx-pegasus npm...

Malicious code in mdx-telesto-dotenv-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d639617ddff6cedf719ea519832831b6dd8b74770dc8afe7915a69c5a7d7bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112394

Malicious code in iota-docusaurus-mdx-backend npm...

MAL-2025-145087 Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-mdx-pulsar-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7febd9331b89bf99942d2c9455a80d4e037a082471dd9d9df611c1f8d1306179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121456

Malicious code in taurus-mdx-promise-browserify npm...

EUVD-2025-123697

Malicious code in pino-meteor-mdx-despina npm...

EUVD-2025-111350

Malicious code in mdx-dotenv-safe-local-readable npm...

EUVD-2025-114980

Malicious code in cors-mdx-spica-adonis npm...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-122146

Malicious code in sedna-mongoose-mdx-taurus npm...

EUVD-2025-114759

Malicious code in csv-nestjs-mdx-link npm...

Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...