MAL-2025-144130 Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111954

Malicious code in kaus-venus-hydra-quantum npm...

EUVD-2025-116322

Malicious code in avior-quantum-quito-enceladus npm...

EUVD-2025-115871

Malicious code in bulma-venus-galaxy-quantum npm...

Malicious code in impulse-mdx-quantum-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36caf23a8d04a63bccd9e6f7ffac308c2ee9c62c18e2f3f6e549f580d38621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123197

Malicious code in proxima-norma-quantum-eridanus npm...

Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e6b7854d6337054e86865f3d0eeb753d04fc6c8d638b25c469819ce5daa294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115011

Malicious code in cordelia-cressida-quantum-dactyl npm...

EUVD-2025-121236

Malicious code in titan-quantum-unuk-gacrux npm...

EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

EUVD-2025-121749

Malicious code in spica-quantum-await-phenomic npm...

EUVD-2025-123019

Malicious code in quantum-hugo-markdown-pdf-registry npm...

EUVD-2025-124821

Malicious code in module-algol-npm-quantum npm...

EUVD-2025-122149

Malicious code in sedna-mensa-pegasus-quantum npm...

Malicious code in build-quantum-alphard-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147974 Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142851 Malicious code in gatsby-registry-quantum-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9a624219976b6e13e865c96a93d11d8d08d21673dba0b54237afda23db2590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140233 Malicious code in bulma-venus-galaxy-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2fb7f7af133dbbfc4e97be93b9c523d8332080995751877c6e8e1881fb53ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...