EUVD-2025-123392

Malicious code in private-cordelia-quark-sass-loader npm...

Malicious code in semantic-release-cordelia-quark-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...