EUVD-2025-124275

Malicious code in norma-json-stop-quantum npm...

EUVD-2025-121050

Malicious code in uglify-js-quantum-vuepress-publish npm...

EUVD-2025-114754

Malicious code in csv-quantum-gemini-meteor npm...

EUVD-2025-123019

Malicious code in quantum-hugo-markdown-pdf-registry npm...

Malicious code in cross-env-quantum-nightwatch-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12400d186977ff15ca3a5e7de847d69c1d3ca300dc0003efd52850bc6ce3c45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123381

Malicious code in private-readable-quantum-triton npm...

EUVD-2025-124444

Malicious code in nightwatch-parcel-cypress-quantum npm...

EUVD-2025-123022

Malicious code in quantum-cressida-registry-chakra-ui npm...

EUVD-2025-124820

Malicious code in module-axios-quantum-cache npm...

EUVD-2025-121236

Malicious code in titan-quantum-unuk-gacrux npm...

EUVD-2025-123013

Malicious code in quantum-mensa-callback-altair npm...

EUVD-2025-115915

Malicious code in build-quantum-alphard-figures npm...

EUVD-2025-123010

Malicious code in quantum-polaris-antares-xanthus npm...

Malicious code in restart-quantum-venus-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65b610d5d796848b0303f14ea0b4fad513afe1272144ef4f17cf7e0a7b0f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115300

Malicious code in cli-quantum-graphql-phoebe npm...

EUVD-2025-122178

Malicious code in scripts-quantum-andromeda-meteor npm...

Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140233 Malicious code in bulma-venus-galaxy-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2fb7f7af133dbbfc4e97be93b9c523d8332080995751877c6e8e1881fb53ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...