EUVD-2025-176877

Malicious code in quantum-computing-mira-volcanology-sublimation npm...

MAL-2025-190369 Malicious code in xenon-comet-xo-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052d305986eaac09c0a7186bb66c0d5c0c3ab65f1a3b1b59a8649f2412ade857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176627

Malicious code in rimraf-quantum-csv-javascript npm...

EUVD-2025-113675

Malicious code in fetch-celeste-link-quantum npm...

EUVD-2025-116103

Malicious code in betelgeuse-quantum-xenos-jovian npm...

EUVD-2025-120942

Malicious code in unuk-sirius-quantum-process npm...

EUVD-2025-112725

Malicious code in hugo-elektra-quantum-wasat npm...

EUVD-2025-123025

Malicious code in quantum-await-meteor-nebula npm...

EUVD-2025-121778

Malicious code in spectron-webdriver-xenon-repository-quantum npm...

EUVD-2025-123027

Malicious code in quantum-avior-chalk-magellan npm...

EUVD-2025-123649

Malicious code in playwright-achernar-fork-quantum npm...

Malicious code in nightwatch-quantum-cosmos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d523ee12ac9a0f0a61a3f8cc6009f7dad2678b53347d3991cb755d728b8a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115871

Malicious code in bulma-venus-galaxy-quantum npm...

EUVD-2025-115011

Malicious code in cordelia-cressida-quantum-dactyl npm...

EUVD-2025-112841

Malicious code in hercules-bellatrix-electron-quantum npm...

EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-124250

Malicious code in npm-acamar-quantum-proxima npm...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

Malicious code in nightwatch-quantum-eleventy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e934385a03280aa2645464ad16fc7f357141f2855f0aa71d9066fa1d3618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...