MAL-2025-141608 Malicious code in despina-regulus-css-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1aab80e4cce0b81ff5effcff1de0ccec604fd14553e05141f232ef3aa99ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121920

Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147984 Malicious code in slides-css-loader-callisto-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e15db063ad96961c26caa1aa5ee053211e5e9c88abed26b2e9f9f82a5714bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113021

Malicious code in grus-css-loader-ophiuchus-scripts npm...

EUVD-2025-112542

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...

Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a78c804487392c81ec4c5b2f22f56c86ca956fd102a26974d8adf7ade602ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-115590

Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini npm...

EUVD-2025-124373

Malicious code in node-sass-mini-css-extract-plugin-spawn-apex npm...

EUVD-2025-114784

Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public npm...

EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba20e4a94027f3181217bb6bdd701c4838a02c50cd8a2bd55e6fdbc9ae2f0a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121359

Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin npm...

Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121101

Malicious code in triton-scripts-cygnus-css-loader npm...

MAL-2025-142024 Malicious code in enceladus-css-loader-nuxtjs-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483e9bf65770e7a71f5e4ead851865362008112e6ac859753ed4775f66af56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...