EUVD-2025-115214

Malicious code in comet-vulcan-mdx-pino npm...

EUVD-2025-111346

Malicious code in mdx-markdown-pdf-andromeda-bunyan npm...

EUVD-2025-111342

Malicious code in mdx-radiant-sagitta-react-bootstrap npm...

EUVD-2025-111341

Malicious code in mdx-react-bootstrap-javascript-impulse npm...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144761 Malicious code in mdx-colors-bunyan-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ebdaf7ddd748565865373709f059db4eebe245bfba39889caf703a67e93af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-mdx-antares-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc2e57ea17da85eaf0b5d0af0cc4aea98bb7840071c4378fe534257b87dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116042

Malicious code in blitz-solis-mdx-pegasus npm...

MAL-2025-140414 Malicious code in carina-mdx-xerxes-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146354 Malicious code in polaris-mdx-pulsar-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7febd9331b89bf99942d2c9455a80d4e037a082471dd9d9df611c1f8d1306179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111349

Malicious code in mdx-gemini-miranda-mysql npm...

MAL-2025-144778 Malicious code in mdx-schema-chai-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e20418c5cc5d9a5995fe03f673118b061c32c2def8904ddb0f8507709f4343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144776 Malicious code in mdx-rimraf-subscription-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae0dfc03d7ef3da474f94bfe9820f5263c24effedec038236376a4ddf6da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139648 Malicious code in atlas-mdx-pyxis-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d4a569c36cb93cfe22fb3e8dcdf66e0ee3ba72263a1ec085f04238964a5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149294 Malicious code in wasat-mdx-rate-limiter-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0f70be6c63321ba8f99aa21a4539ca8d3c3df796d1581f025866df7308c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144768 Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143928 Malicious code in jest-mdx-aurora-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b68d4bbf9b461dbf984128d8547052b0cebeff32e91ea0cb65ef648bc2b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...