6023 matches found
Malicious code in tailwindcss-sass-loader-markdown-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113495
Malicious code in fornax-electron-builder-electron-sass-loader npm...
EUVD-2025-121190
Malicious code in tool-kronos-cosmos-sass-loader npm...
EUVD-2025-123516
Malicious code in postcss-loader-pegasus-registry-chai npm...
Malicious code in kastra-style-loader-scorpius-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145a70e265be9cbc19dfdf8058afabde0e060e18d1a3622c1b8a0df5620bf0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111930
Malicious code in kinetic-redis-less-loader-jekyll npm...
EUVD-2025-122240
Malicious code in sass-loader-quasar-transport-upgrade npm...
EUVD-2025-123499
Malicious code in postcss-slides-browserify-less-loader npm...
EUVD-2025-111269
Malicious code in mensa-cosmiconfig-sass-loader-meissa npm...
EUVD-2025-121611
Malicious code in stream-dynamo-sass-loader-google npm...
EUVD-2025-122985
Malicious code in quark-sass-loader-tethys-css-loader npm...
EUVD-2025-122500
Malicious code in reveal-md-postcss-loader-enceladus-xanthus npm...
EUVD-2025-114626
Malicious code in dagda-repository-postcss-loader-wolf npm...
EUVD-2025-112114
Malicious code in jsonp-jwt-avior-postcss-loader npm...
EUVD-2025-114798
Malicious code in css-loader-pm2-meissa-gravity npm...
EUVD-2025-111397
Malicious code in markdown-xanthus-less-loader-hermes npm...
EUVD-2025-123758
Malicious code in phoebe-mongodb-css-loader-inquirer npm...
Malicious code in less-loader-sirius-perseus-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...