EUVD-2025-116929

Malicious code in acamar-dagda-koa-quark npm...

EUVD-2025-122993

Malicious code in quark-mui-adonis-hydra npm...

Malicious code in semantic-release-cordelia-quark-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-quark-arcturus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f657b0a6018bdd1bfdeef1e46d6a6e7daa9470bd4549627d647c52014c97745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115569

Malicious code in centauri-semantic-release-rehype-quark npm...

EUVD-2025-121178

Malicious code in tool-quark-andromeda-schema npm...

EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...

EUVD-2025-122983

Malicious code in quark-toml-iota-nashira npm...

EUVD-2025-112297

Malicious code in janus-magellan-quark-airbnb npm...

Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123189

Malicious code in proxima-quark-metalsmith-jasmine npm...

MAL-2025-147582 Malicious code in sagitta-browserify-zephyr-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd36dba1a904be5cf2cd8b0152ea4208241db504429bc5d6446aa4d5866ffc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143348 Malicious code in hexo-ora-quark-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143484 Malicious code in hyperion-loglevel-quark-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b941f79038bbce9958ae4c4b3f47fbd6a6aa8a398a4c02a26fcab2ba71c021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146935 Malicious code in quark-quark-nashira-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914f834f4b21cb90921290893bd5c244d57a77e5c7b1290b8eb6ad292bf0b7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146934 Malicious code in quark-process-schema-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec4fe47aea0991145f9198831818cd8927acd7ff0779d6a8a4553a3b0018f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146923 Malicious code in quark-csv-draco-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9080c335f4716783b757edb5e4194b3a55d2cc2f22771bd3c9e86bb62589188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-quark-kronos-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb669fdd0ea4a80ca906fef4eea67f07faf499b07671c17f6f33b31f08a56396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...