364 matches found
EUVD-2025-115398
Malicious code in chariklo-quark-middleware-prettier npm...
EUVD-2025-123842
Malicious code in perseus-cosmiconfig-firebase-quark npm...
EUVD-2025-122340
Malicious code in sagitta-browserify-zephyr-quark npm...
EUVD-2025-122989
Malicious code in quark-pipe-mocha-nodejs npm...
EUVD-2025-114554
Malicious code in deneb-quark-dotenv-safe-await npm...
Malicious code in quark-colors-auth0-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123489
Malicious code in postgres-geckodriver-less-loader-quark npm...
EUVD-2025-123001
Malicious code in quark-child-process-mongodb-phoebe npm...
EUVD-2025-112247
Malicious code in jasmine-spectron-andromeda-quark npm...
EUVD-2025-116916
Malicious code in acamar-quark-native-chakra-ui npm...
Malicious code in writable-mui-iota-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e01de43ec016ed5269f79e51129c4519b0191192620c44b484a9d5b3d318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141074 Malicious code in convict-gemini-quark-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1105a5512cdb4ea28cb806f26bc05f275144f73d19090426faa14c19edd2fa63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140709 Malicious code in chariklo-quark-middleware-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142826 Malicious code in ganymede-uglify-js-quark-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df50c36528c4a8e1bab4e35ccc450588e1ba30021f8c1a6b0fc5acae6fac685a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146432 Malicious code in postgres-geckodriver-less-loader-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146924 Malicious code in quark-foundation-astro-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-quark-browserify-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd0e447d1df55cb8dfc1d3a02be155fb47b264e13fa88878c6fc14b5d2ecbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...