EUVD-2025-179540

Malicious code in cosmicweb-leda-sadr-reveal-md npm...

MAL-2025-189228 Malicious code in reveal-md-sirius-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968ce933dbdad8b347b9115160eb71c5d39ab52d322b18214ad9c9007cd336e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177739

Malicious code in mui-reveal-md-registry-yaml npm...

EUVD-2025-178276

Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown npm...

EUVD-2025-179829

Malicious code in centauri-module-adonis-reveal-md npm...

Malicious code in reveal-md-cladistics-brane-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba1890cc09a73e9c729e70b806349b00973870edcf90f85549e6e946745d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176650

Malicious code in reveal-md-electron-builder-chalk-steganography npm...

EUVD-2025-176649

Malicious code in reveal-md-neptune-run-script-ignite npm...

EUVD-2025-179536

Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md npm...

EUVD-2025-176687

Malicious code in repository-reveal-md-multiverse-quasar npm...

EUVD-2025-178066

Malicious code in lint-staged-reveal-md-electron-convict npm...

EUVD-2025-176647

Malicious code in reveal-md-sirius-sequelize-nebula npm...

MAL-2025-189014 Malicious code in quantumfoam-zenobia-reveal-md-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27799202edd9df55bfa425f701a2e9f280f60f6af0265fd10a9ab55e7cc7d7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111921

Malicious code in koa-electron-reveal-md-pavo npm...

EUVD-2025-122515

Malicious code in reveal-md-flare-kastra-css-loader npm...

EUVD-2025-122498

Malicious code in reveal-md-proxima-changelog-publish npm...

EUVD-2025-122516

Malicious code in reveal-md-epimetheus-impulse-procyon npm...

Malicious code in alphard-cluster-reveal-md-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee22bbbe9632215a2c3c8b8578c6322a0cfb2caa0be027efb0af754d7e2e82ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116610

Malicious code in apollo-andromeda-unuk-reveal-md npm...