EUVD-2025-124444

Malicious code in nightwatch-parcel-cypress-quantum npm...

EUVD-2025-123013

Malicious code in quantum-mensa-callback-altair npm...

Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

EUVD-2025-112762

Malicious code in hexo-quantum-vuetify-update npm...

EUVD-2025-123063

Malicious code in puppeteer-polaris-rollup-plugin-quantum npm...

EUVD-2025-123019

Malicious code in quantum-hugo-markdown-pdf-registry npm...

EUVD-2025-124275

Malicious code in norma-json-stop-quantum npm...

MAL-2025-140233 Malicious code in bulma-venus-galaxy-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2fb7f7af133dbbfc4e97be93b9c523d8332080995751877c6e8e1881fb53ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123381

Malicious code in private-readable-quantum-triton npm...

EUVD-2025-123018

Malicious code in quantum-install-puppeteer-link npm...

EUVD-2025-121368

Malicious code in terser-webpack-plugin-release-it-quantum-sirius npm...

EUVD-2025-124820

Malicious code in module-axios-quantum-cache npm...

EUVD-2025-121236

Malicious code in titan-quantum-unuk-gacrux npm...

EUVD-2025-116322

Malicious code in avior-quantum-quito-enceladus npm...

EUVD-2025-121749

Malicious code in spica-quantum-await-phenomic npm...

EUVD-2025-123024

Malicious code in quantum-commitlint-config-angular-event-firebase npm...

MAL-2025-149304 Malicious code in wasat-vuepress-quantum-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54baa5ade6015fb6c9054123ae3a3e98a0e3155acfa1feb4ea656bd3a588600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...