EUVD-2025-122250

Malicious code in sass-loader-lacerta-axios-scripts npm...

EUVD-2025-121585

Malicious code in style-loader-rollup-plugin-izar-phoebe npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-121730

Malicious code in spinner-fomalhaut-postcss-loader-private npm...

EUVD-2025-122251

Malicious code in sass-loader-jovian-axios-framework npm...

EUVD-2025-111926

Malicious code in kinetic-typeorm-less-loader-markdownlint npm...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146402 Malicious code in postcss-loader-nightwatch-hugo-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4beacd28628662157313c1228b2e5d2f837b744c07aa98fb2107f178cad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121919

Malicious code in slidev-io-bellatrix-sass-loader npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-122257

Malicious code in sass-loader-corvus-kastra-jest npm...

EUVD-2025-122208

Malicious code in scorpius-sass-loader-jekyll-upgrade npm...

EUVD-2025-113459

Malicious code in fornax-selenium-postcss-loader-middleware npm...

EUVD-2025-112197

Malicious code in jekyll-transport-fusion-css-loader npm...

EUVD-2025-114240

Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager npm...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122244

Malicious code in sass-loader-native-jsonp-callisto npm...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...