EUVD-2025-112965

Malicious code in halley-ini-neptune-quasar npm...

EUVD-2025-115545

Malicious code in ceres-dione-materialize-quasar npm...

Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122967

Malicious code in quasar-markdownlint-ceres-atlas npm...

Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139396 Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-quasar-orbit-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18a6e8300a181852e113ff2fc98e322083e63a46937effefc962720baaa0258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146958 Malicious code in quasar-rate-limiter-changelog-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc9114b2a03607eceb91b226e779174e19177fa53be111b25fcc6cce8a74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143239 Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116870

Malicious code in aether-io-quasar-oberon npm...

MAL-2025-147202 Malicious code in relay-link-algol-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f744192cc61bbb04cab07c9abb1e3fc9e56393bf2a762138aeaeea009f73581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-39901

Malicious code in bioql PyPI...

Malicious code in quasar-regulus-epigenetics-mutation (npm)

The package quasar-regulus-epigenetics-mutation was found to contain malicious code...

Malicious code in quasar-ophiuchus-heka-dotenv (npm)

The package quasar-ophiuchus-heka-dotenv was found to contain malicious code...

Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...