EUVD-2025-122295

Malicious code in sagitta-vortex-norma-mini-css-extract-plugin npm...

EUVD-2025-120169

Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...

EUVD-2025-111133

Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella npm...

EUVD-2025-124164

Malicious code in oberon-sedna-css-loader-stop npm...

EUVD-2025-112800

Malicious code in hermes-css-loader-request-restart npm...

EUVD-2025-121408

Malicious code in terser-flare-css-loader-pipe npm...

Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115286

Malicious code in cluster-css-loader-halley-cressida npm...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-114808

Malicious code in css-loader-dione-barnard-slidev npm...

EUVD-2025-122487

Malicious code in rigel-mini-css-extract-plugin-husky-grunt npm...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121292

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif npm...

EUVD-2025-111726

Malicious code in library-pulsar-mini-css-extract-plugin-init npm...

MAL-2025-142024 Malicious code in enceladus-css-loader-nuxtjs-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483e9bf65770e7a71f5e4ead851865362008112e6ac859753ed4775f66af56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149228 Malicious code in vulcan-css-loader-command-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139954 Malicious code in bellatrix-protractor-fomalhaut-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4aa076d16605f852f34a40ab150b55bcd62c3c8df33c8f1fa61916e50f8113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...