Malicious code in miranda-yonder-css-loader-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121475

Malicious code in tailwindcss-sass-loader-markdown-odin npm...

EUVD-2025-113911

Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...

EUVD-2025-122589

Malicious code in resolvers-registry-less-loader-phoenix npm...

EUVD-2025-121940

Malicious code in slides-geckodriver-sass-loader-webpack npm...

EUVD-2025-122263

Malicious code in sass-loader-algol-perseus-event npm...

EUVD-2025-112581

Malicious code in ignite-test-less-loader-kaus npm...

EUVD-2025-116343

Malicious code in auth0-style-loader-polaris-gridsome npm...

EUVD-2025-115302

Malicious code in cli-npm-postcss-loader-juno npm...

EUVD-2025-114806

Malicious code in css-loader-gatsby-oberon-got npm...

EUVD-2025-111779

Malicious code in less-loader-terser-umbra-regulus npm...

EUVD-2025-123528

Malicious code in postcss-loader-elara-izar-pino-pretty npm...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111378

Malicious code in materialize-css-loader-install-dagda npm...

EUVD-2025-116554

Malicious code in aquarius-sass-loader-morgan-unuk npm...

EUVD-2025-115344

Malicious code in chromedriver-commitlint-norma-less-loader npm...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115505

Malicious code in chai-procyon-postcss-loader-forever npm...

EUVD-2025-123817

Malicious code in perseus-postcss-loader-janus-gacrux npm...

EUVD-2025-116630

Malicious code in apex-aldebaran-sass-loader-puppeteer npm...