364 matches found
EUVD-2025-113396
Malicious code in frontend-quark-antares-nova npm...
EUVD-2025-112395
Malicious code in iota-deneb-quark-mocha npm...
EUVD-2025-120358
Malicious code in writable-mui-eclipse-quark npm...
Malicious code in winston-eslint-plugin-quark-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706839edf2b666a4f9ca7c829230ca1869eada44401afc05d260eec76ec24e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115124
Malicious code in commitlint-fetch-quark-react-bootstrap npm...
EUVD-2025-112077
Malicious code in juno-quark-semantic-ui-eclipse npm...
EUVD-2025-122528
Malicious code in restart-quark-fusion-castor npm...
Malicious code in restart-quark-fusion-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in elara-impulse-galaxy-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122991
Malicious code in quark-oberon-cypress-charon npm...
EUVD-2025-122689
Malicious code in release-it-quark-antd-meteor npm...
EUVD-2025-122998
Malicious code in quark-foundation-astro-install npm...
EUVD-2025-122189
Malicious code in scripts-got-electron-quark npm...
EUVD-2025-121455
Malicious code in taurus-miranda-yonder-quark npm...
EUVD-2025-111400
Malicious code in markdown-rollup-plugin-quark-zephyr npm...
MAL-2025-146432 Malicious code in postgres-geckodriver-less-loader-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jekyll-quark-sync-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7835916f3c4f8b37024734e440a3eb602cfc77184e289072d3fc20399511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115399
Malicious code in chariklo-quark-inquirer-ora npm...