EUVD-2025-177606

Malicious code in nightmare-package-quark-cli npm...

EUVD-2025-178636

Malicious code in grus-private-quark-prettier-plugin-markdown npm...

EUVD-2025-180165

Malicious code in babel-babel-config-quark npm...

MAL-2025-189025 Malicious code in quark-postcss-soap-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ab6eb7fe1ae8807a5143e9fe44dc0700539f225b246bea505b8b47fe4081da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178940

Malicious code in farout-quark-joviology-nodejs npm...

EUVD-2025-178046

Malicious code in local-cz-conventional-changelog-cosmos-quark npm...

EUVD-2025-179672

Malicious code in colors-superflare-rigel-quark npm...

EUVD-2025-176854

Malicious code in quark-iota-paleoclimatology-enif npm...

Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-dorado-ethology-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9270626698c8706953e8ddc2fe61d99577497576cc954a81c95ae6ad4a0c625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176859

Malicious code in quark-charon-hercules-lepton npm...

MAL-2025-185717 Malicious code in babel-babel-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e59f0ddc5f47202e4b411392aa267a1343447c1668f653954d176f31867bc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176856

Malicious code in quark-eslint-config-materialize-css-loader npm...

EUVD-2025-179953

Malicious code in build-hapi-registry-quark npm...

EUVD-2025-177753

Malicious code in morgan-sass-loader-release-it-quark npm...

EUVD-2025-179789

Malicious code in chakra-ui-test-quark-astrophysics npm...

EUVD-2025-180032

Malicious code in blazar-quark-publish-quito npm...

Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176853

Malicious code in quark-loopback-palynology-cypress npm...

MAL-2025-189017 Malicious code in quark-dorado-ethology-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9270626698c8706953e8ddc2fe61d99577497576cc954a81c95ae6ad4a0c625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...