EUVD-2025-178274

Malicious code in jest-titan-postcss-loader-galaxy npm...

EUVD-2025-176698

Malicious code in remark-io-sass-loader-changelog npm...

EUVD-2025-178426

Malicious code in indus-coronalmassejection-sass-loader-virgo npm...

EUVD-2025-176814

Malicious code in radioastronomy-augmentedreality-library-style-loader npm...

EUVD-2025-177530

Malicious code in nova-chakra-ui-css-loader-eris npm...

EUVD-2025-177843

Malicious code in middleware-exec-callisto-postcss-loader npm...

EUVD-2025-179276

Malicious code in dorado-hexo-sqlite-postcss-loader npm...

EUVD-2025-176921

Malicious code in publish-postcss-loader-achernar-hermes npm...

EUVD-2025-179791

Malicious code in chakra-ui-sadr-yaml-less-loader npm...

EUVD-2025-179129

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver npm...

EUVD-2025-177680

Malicious code in nebula-development-less-loader-achernar npm...

EUVD-2025-178041

Malicious code in local-terser-postcss-loader-eventhoriz npm...

EUVD-2025-177670

Malicious code in neptune-barnard-mdx-less-loader npm...

EUVD-2025-177641

Malicious code in nestjs-postcss-loader-slides-spinner npm...

Malicious code in quantum-computing-less-loader-mensa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefb4c011996c06f58eda7e1840993e823cf3eddca4bdc92a366643fbc9da57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179673

Malicious code in colors-style-loader-bellatrix-tool npm...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sass-loader-global-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-command-betelgeuse-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...