6023 matches found
EUVD-2025-123741
Malicious code in phoebe-sass-loader-luna-reveal-md npm...
EUVD-2025-120728
Malicious code in vuepress-winston-middleware-sass-loader npm...
EUVD-2025-113378
Malicious code in fusion-geckodriver-server-less-loader npm...
EUVD-2025-120856
Malicious code in ursa-sass-loader-orbit-async npm...
EUVD-2025-111276
Malicious code in meissa-wolf-server-sass-loader npm...
EUVD-2025-112787
Malicious code in hermes-request-antares-less-loader npm...
EUVD-2025-123511
Malicious code in postcss-loader-slidev-gulp-bellatrix npm...
Malicious code in postcss-loader-pegasus-registry-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124701
Malicious code in mutation-bunyan-materialize-style-loader npm...
EUVD-2025-112414
Malicious code in io-hercules-css-loader-sync npm...
EUVD-2025-121414
Malicious code in terser-css-loader-mongoose-acamar npm...
EUVD-2025-112126
Malicious code in json-ursa-css-loader-dotenv npm...
EUVD-2025-111800
Malicious code in less-loader-andromeda-less-loader-envconfig npm...
EUVD-2025-111870
Malicious code in lacerta-hyperion-cors-sass-loader npm...
EUVD-2025-113473
Malicious code in fornax-mongodb-ini-sass-loader npm...
EUVD-2025-120226
Malicious code in xerxes-foundation-postcss-loader-aquarius npm...
EUVD-2025-113875
Malicious code in eslint-plugin-perseus-css-loader-eclipse npm...
Malicious code in sedna-parcel-css-loader-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...