Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866755da032f89e835ad4dcc205c1bb514c50448977117637cdb00b19af44d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178393

Malicious code in inquirer-quasar-polaris-aquarius npm...

EUVD-2025-178146

Malicious code in leda-loopback-markdown-pdf-quasar npm...

EUVD-2025-175506

Malicious code in xenon-command-futurology-quasar npm...

Malicious code in elara-triton-quasar-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177279

Malicious code in pegasus-quasar-oscillation-titan npm...

EUVD-2025-176970

Malicious code in proxima-aether-quasar-xml npm...

Malicious code in xenon-command-futurology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-parcel-ora-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-registry-webpack-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c310c475846e8ee5e7c18a1b32e566c7929067fa02791639c37510e9d7820c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176841

Malicious code in quasar-robotics-soap-winston npm...

EUVD-2025-178950

Malicious code in extremophile-fornax-quasar-carpo npm...

EUVD-2025-176354

Malicious code in sirius-registry-webpack-quasar npm...

Malicious code in chai-blazar-quasar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128176b0ea3dd4cd1df472e8b25d1a0d98e84d2b8f1a03ae9e5ad8efb29eeab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176133

Malicious code in superagent-quasar-exoplanetology-areology npm...

EUVD-2025-176849

Malicious code in quasar-astrophysics-less-paleontology npm...

EUVD-2025-179359

Malicious code in delphinus-chromedriver-quasar-cordelia npm...

Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179862

Malicious code in castor-callisto-miranda-quasar npm...

Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...