EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

EUVD-2025-114843

Malicious code in cross-env-quantum-nightwatch-bunyan npm...

Malicious code in nightwatch-quantum-eleventy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e934385a03280aa2645464ad16fc7f357141f2855f0aa71d9066fa1d3618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146903 Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112565

Malicious code in impulse-mdx-quantum-nextjs npm...

MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147974 Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

EUVD-2025-112660

Malicious code in hydra-private-quantum-test npm...

EUVD-2025-112559

Malicious code in impulse-sirius-quantum-local npm...

EUVD-2025-111983

Malicious code in kastra-quantum-public-restart npm...

EUVD-2025-111954

Malicious code in kaus-venus-hydra-quantum npm...

Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-quantum-alphard-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-celeste-link-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd7a1846ff262e5c7b508f4b84abf81c837205c5ccd7d9dc7f3b32ee0d35ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...