681 matches found
MAL-2025-146462 Malicious code in prettier-cordelia-soap-websockets (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114541
Malicious code in dependencies-fusion-prettier-cross-env npm...
MAL-2025-147572 Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146494 Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146242 Malicious code in pino-pretty-procyon-redis-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6fdc4f0dec8028c29094b0260a239dad14986697d599671509e7985d30710e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145938 Malicious code in package-luna-prettier-plugin-markdown-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75efe02b19ff9ec70cbd27c5dc3b7ff7f2efe7c12ee542ff0ba4d8f933f0cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146490 Malicious code in prettier-plugin-markdown-nebula-indus-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6492a83247e49f72e6921cfc3118e1d644657d0ff4c5ddedafb09ef6265249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140709 Malicious code in chariklo-quark-middleware-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122894
Malicious code in rate-limiter-acamar-cache-prettier-plugin-markdown npm...
MAL-2025-146480 Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3139efe2b8fe49fc17c17202dd196338965628ff711b11f0d0b1c4e1727266a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123449
Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf npm...
Malicious code in airbnb-base-typescript-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in skyscanner-with-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ee691d4871e49dccfe0f756848ea5ef13360c6ff86d64bc7ddb718ac5d423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview skyscanner-with-prettier is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...