2160 matches found
EUVD-2025-121368
Malicious code in terser-webpack-plugin-release-it-quantum-sirius npm...
Malicious code in restart-quantum-venus-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65b610d5d796848b0303f14ea0b4fad513afe1272144ef4f17cf7e0a7b0f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123022
Malicious code in quantum-cressida-registry-chakra-ui npm...
EUVD-2025-123008
Malicious code in quantum-regulus-xerxes-iota npm...
EUVD-2025-123010
Malicious code in quantum-polaris-antares-xanthus npm...
EUVD-2025-121749
Malicious code in spica-quantum-await-phenomic npm...
EUVD-2025-122529
Malicious code in restart-quantum-venus-config npm...
EUVD-2025-112559
Malicious code in impulse-sirius-quantum-local npm...
EUVD-2025-111948
Malicious code in kinetic-bunyan-dotenv-safe-quantum npm...
EUVD-2025-123024
Malicious code in quantum-commitlint-config-angular-event-firebase npm...
EUVD-2025-123090
Malicious code in pulsar-gacrux-geckodriver-quantum npm...
EUVD-2025-115300
Malicious code in cli-quantum-graphql-phoebe npm...
Malicious code in quantum-hugo-markdown-pdf-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149304 Malicious code in wasat-vuepress-quantum-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54baa5ade6015fb6c9054123ae3a3e98a0e3155acfa1feb4ea656bd3a588600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114754
Malicious code in csv-quantum-gemini-meteor npm...
EUVD-2025-124820
Malicious code in module-axios-quantum-cache npm...
EUVD-2025-123017
Malicious code in quantum-izar-arcturus-magellan npm...