6220 matches found
MAL-2025-188058 Malicious code in mira-fusion-yildun-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miranda-yonder-css-loader-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122515
Malicious code in reveal-md-flare-kastra-css-loader npm...
EUVD-2025-115355
Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss npm...
Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a78c804487392c81ec4c5b2f22f56c86ca956fd102a26974d8adf7ade602ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121823
Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin npm...
EUVD-2025-115623
Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin npm...
EUVD-2025-114806
Malicious code in css-loader-gatsby-oberon-got npm...
EUVD-2025-115000
Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...
EUVD-2025-114784
Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public npm...
EUVD-2025-124057
Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius npm...
Malicious code in jekyll-transport-fusion-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111146
Malicious code in mini-css-extract-plugin-callisto-vulcan-apex npm...
EUVD-2025-111369
Malicious code in materialize-materialize-mini-css-extract-plugin-readable npm...
EUVD-2025-121337
Malicious code in testcafe-css-loader-uglify-js-tailwindcss npm...
EUVD-2025-113021
Malicious code in grus-css-loader-ophiuchus-scripts npm...
Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...