@bassist/eslint-config (>=0.3.0 <=0.5.0), @bassist/oxc-integration (>=0.1.0 <=0.2.0) +7 more potentially affected by unknown CVE via @lint-md/core (>=2.0.0-beta.14 <=2.0.0)

@lint-md/core NPM version =2.0.0-beta.14, =0.3.0, =0.1.0, =2.0.0, =4.1.0, =1.1.0, =1.19.7, =1.1.0, =1.0.0, =1.3.4, =1.3.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-4124...

EUVD-2025-177068

Malicious code in prettier-plugin-markdown-toml-reveal-md-event npm...

EUVD-2025-175503

Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...

EUVD-2025-179478

Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script npm...

EUVD-2025-175760

Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown npm...

EUVD-2025-177069

Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo npm...

MAL-2025-188804 Malicious code in prettier-plugin-markdown-json-joviology-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c2ec48136a94af28753b551045760b6106f7082b5329b5df9339789310bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177067

Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin npm...

EUVD-2025-176743

Malicious code in registry-ursa-prettier-plugin-markdown-framework npm...

MAL-2025-189788 Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7049cee782d42510430e26832fb304bb48636354de220eb85f797b763b0df0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179204

Malicious code in eclipse-hercules-europa-prettier-plugin-markdown npm...

MAL-2025-186678 Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c819411e05d0061457e9887c6906e3929d2896491c60dcced2f30818f4ef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177072

Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology npm...

EUVD-2025-177070

Malicious code in prettier-plugin-markdown-lint-jest-scripts npm...

EUVD-2025-180038

Malicious code in blackhole-prettier-plugin-markdown-achernar-redis npm...

MAL-2025-188808 Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d127b0c9f947d1492f92f14baf0b1176b10c671a86679754fb5820a10c238e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177074

Malicious code in prettier-plugin-markdown-aquarius-colors-antares npm...

EUVD-2025-177066

Malicious code in prettier-registry-forever-prettier-plugin-markdown npm...

EUVD-2025-178425

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...

EUVD-2025-178187

Malicious code in kinetic-redshift-pino-pretty-prettier-plugin-markdown npm...