EUVD-2025-114131

Malicious code in element-ui-prettier-css-loader-elara npm...

EUVD-2025-123657

Malicious code in pipe-mini-css-extract-plugin-vuepress-phoebe npm...

EUVD-2025-111123

Malicious code in mini-css-extract-plugin-redis-tool-ignite npm...

EUVD-2025-112904

Malicious code in heka-mini-css-extract-plugin-xenos-prompts npm...

EUVD-2025-113102

Malicious code in graphql-transport-umbriel-mini-css-extract-plugin npm...

EUVD-2025-114349

Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...

EUVD-2025-114239

Malicious code in elara-css-loader-tool-yonder npm...

EUVD-2025-124623

Malicious code in native-spectron-mini-css-extract-plugin-loopback npm...

EUVD-2025-114438

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json npm...

EUVD-2025-111468

Malicious code in magellan-meissa-mini-css-extract-plugin-dorado npm...

EUVD-2025-111833

Malicious code in leda-mini-css-extract-plugin-backend-radiant npm...

EUVD-2025-120543

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...

EUVD-2025-122132

Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-113274

Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran npm...

EUVD-2025-121314

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145019 Malicious code in miranda-ariel-metalsmith-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edfbaf3006b6027e406e19e8a4d6215add69e23c09a4540decae8c630303be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146343 Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...