EUVD-2025-122967

Malicious code in quasar-markdownlint-ceres-atlas npm...

Malicious code in virgo-quasar-orbit-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18a6e8300a181852e113ff2fc98e322083e63a46937effefc962720baaa0258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143239 Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147202 Malicious code in relay-link-algol-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f744192cc61bbb04cab07c9abb1e3fc9e56393bf2a762138aeaeea009f73581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113882

Malicious code in eslint-plugin-chai-lacerta-quasar npm...

EUVD-2025-112235

Malicious code in javascript-dotenv-quasar-spica npm...

EUVD-2025-122972

Malicious code in quasar-geckodriver-got-chakra-ui npm...

EUVD-2025-122977

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot npm...

Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122964

Malicious code in quasar-rate-limiter-changelog-aquarius npm...

MAL-2025-146958 Malicious code in quasar-rate-limiter-changelog-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc9114b2a03607eceb91b226e779174e19177fa53be111b25fcc6cce8a74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139396 Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-39901

Malicious code in bioql PyPI...

Malicious code in quasar-ophiuchus-heka-dotenv (npm)

The package quasar-ophiuchus-heka-dotenv was found to contain malicious code...

Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...