EUVD-2025-115433

Malicious code in changelog-markdown-pdf-rocket-hermes npm...

EUVD-2025-114244

Malicious code in elara-canopus-markdown-pdf-native npm...

EUVD-2025-115163

Malicious code in commitizen-terser-hugo-markdown-pdf npm...

EUVD-2025-111427

Malicious code in markdown-pdf-child-process-chakra-ui-winston npm...

EUVD-2025-124361

Malicious code in nodejs-cygnus-sync-markdown-pdf npm...

EUVD-2025-116351

Malicious code in auth0-markdown-pdf-jovian-cluster npm...

EUVD-2025-113529

Malicious code in fork-css-loader-halley-markdown-pdf npm...

EUVD-2025-113887

Malicious code in eslint-markdown-pdf-gulp-eleventy npm...

EUVD-2025-112484

Malicious code in init-postcss-markdown-pdf-sequelize npm...

EUVD-2025-111419

Malicious code in markdown-pdf-mongoose-hapi-janus npm...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

EUVD-2025-114935

Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager npm...

EUVD-2025-111411

Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin npm...

Malicious code in betelgeuse-betelgeuse-markdown-pdf-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95bca846956aa66c7d81ff6a73a5633eceff85d1a084194aae220483f96e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121688

Malicious code in sqlite-release-it-markdown-pdf-comet npm...

EUVD-2025-115015

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf npm...

EUVD-2025-112632

Malicious code in hyperion-janus-install-markdown-pdf npm...

EUVD-2025-120930

Malicious code in update-markdown-pdf-pyxis-spinner npm...

MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144519 Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ea4b32d4c9b2d2ce285363f2b37f3939d71151d71bbfea24e5c4bfac821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...