EUVD-2025-175478

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota npm...

EUVD-2025-180273

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

EUVD-2025-179458

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private npm...

EUVD-2025-179775

Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv npm...

EUVD-2025-179961

Malicious code in buffer-css-loader-draco-sirius npm...

EUVD-2025-178676

Malicious code in graphql-nightmare-css-loader-abiogenesis npm...

EUVD-2025-177392

Malicious code in package-changelog-css-loader-slidev npm...

EUVD-2025-177011

Malicious code in promise-umbra-css-loader-postcss-loader npm...

MAL-2025-187064 Malicious code in fusion-gravity-css-loader-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52baf9ca8ebdb49763df8f528108db23d21f441b6cd5d8a94e2be0ad3edd8db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187206 Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827a1eab8ee4f7a8518854247fd592f6a76ba721ba6900d144ce9f687b27a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190157 Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175718

Malicious code in virgo-css-loader-whitedwarf-mongoose npm...

EUVD-2025-177824

Malicious code in mira-fusion-yildun-css-loader npm...

EUVD-2025-178852

Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin npm...

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185408 Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f6e45379c72e896fa2c8a42159e2ada3a7553eef28d5b9d72873afc1ac74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...