EUVD-2025-114604

Malicious code in deimos-sass-loader-quark-dotenv npm...

EUVD-2025-124477

Malicious code in nightmare-quark-cygnus-antares npm...

EUVD-2025-115759

Malicious code in callisto-quark-electron-builder-markdown-pdf npm...

EUVD-2025-122987

Malicious code in quark-quark-nashira-indus npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-112310

Malicious code in janus-configstore-quark-chai npm...

EUVD-2025-120357

Malicious code in writable-mui-iota-quark npm...

Malicious code in quark-aquarius-eslint-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122309

Malicious code in sagitta-quark-browserify-ariel npm...

EUVD-2025-122990

Malicious code in quark-pino-pretty-relay-elektra npm...

EUVD-2025-122996

Malicious code in quark-html-webpack-plugin-farout-pm2 npm...

EUVD-2025-113129

Malicious code in got-quark-charon-prettier-plugin-markdown npm...

Malicious code in writable-mui-eclipse-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45366a5bba33878c6502bbbd773eb845366dcc9940e5c867b6093acc04700fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114783

Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml npm...

EUVD-2025-113464

Malicious code in fornax-quark-meteor-ursa npm...

MAL-2025-143816 Malicious code in janus-magellan-quark-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696fbfcd478350fa5c64c1d68b7c5502ad6df5cf972b8cf3e69c7f0d811eb85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112764

Malicious code in hexo-ora-quark-loglevel npm...

EUVD-2025-113264

Malicious code in gatsby-quark-prettier-stylelint-subscription npm...

MAL-2025-148473 Malicious code in taurus-miranda-yonder-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522058eacf385789d7b9d2dab9db3cb50cac6b1660e926378d440f667f67abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146928 Malicious code in quark-metalsmith-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bfcb7cc1eb411b112fa6af69eaab7717479dc39cd47dbe110c5e2a84aa634c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...