MAL-2025-186932 Malicious code in extremophile-fornax-quasar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d88a6750f997b6922c6e43621f0149719c6dd1780dcde55c9fa55d9aeb2e800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122965

Malicious code in quasar-query-mongoose-alphard npm...

EUVD-2025-122962

Malicious code in quasar-rollup-adonis-equinox npm...

EUVD-2025-112965

Malicious code in halley-ini-neptune-quasar npm...

EUVD-2025-124467

Malicious code in nightwatch-adonis-quasar-procyon npm...

EUVD-2025-112542

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...

EUVD-2025-122977

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot npm...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146960 Malicious code in quasar-rollup-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146962 Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116818

Malicious code in aldebaran-quasar-quantum-deimos npm...

EUVD-2025-122972

Malicious code in quasar-geckodriver-got-chakra-ui npm...

EUVD-2025-122975

Malicious code in quasar-electron-geckodriver-vuepress npm...

EUVD-2025-120229

Malicious code in xerxes-csrf-quasar-tailwindcss npm...

EUVD-2025-122974

Malicious code in quasar-firebase-fornax-eslint-config npm...

EUVD-2025-115545

Malicious code in ceres-dione-materialize-quasar npm...

EUVD-2025-122969

Malicious code in quasar-jest-wasat-luna npm...

EUVD-2025-114179

Malicious code in electron-sadr-quasar-init npm...

EUVD-2025-122981

Malicious code in quasar-bulma-tethys-capella npm...