Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123026

Malicious code in quantum-await-meissa-iota npm...

EUVD-2025-112514

Malicious code in ini-pulsar-cross-env-quantum npm...

EUVD-2025-112660

Malicious code in hydra-private-quantum-test npm...

EUVD-2025-123021

Malicious code in quantum-deimos-colors-dagda npm...

EUVD-2025-116153

Malicious code in bellatrix-passport-quantum-levels npm...

Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-algol-npm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4076437c513112089b53d9a85ce5172d0f134afb19ff5def94fb7a291385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123020

Malicious code in quantum-ganymede-gravity-winston npm...

EUVD-2025-112565

Malicious code in impulse-mdx-quantum-nextjs npm...

EUVD-2025-122682

Malicious code in release-it-xo-quantum-bellatrix npm...

EUVD-2025-123016

Malicious code in quantum-karma-eslint-plugin-javascript npm...

EUVD-2025-123006

Malicious code in quantum-tailwindcss-kastra-bellatrix npm...

EUVD-2025-114796

Malicious code in css-loader-quantum-eslint-betelgeuse npm...

EUVD-2025-120402

Malicious code in winston-sqlite-typeorm-quantum npm...

Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-enceladus-quantum-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4345762cf9572c4ca534d0cb8b85a40e1ec55b8a4adf7873feaa18f6e575f5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111983

Malicious code in kastra-quantum-public-restart npm...

EUVD-2025-121951

Malicious code in sirius-resolvers-quantum-rollup-plugin npm...

MAL-2025-146904 Malicious code in quantum-install-puppeteer-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724acaff6d5a6ae464eb4bc6952dd230597cc047db7f7a926acc4906c1510a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...