EUVD-2025-124854

Malicious code in miranda-yonder-css-loader-hercules npm...

EUVD-2025-123527

Malicious code in postcss-loader-europa-webdriver-mocha-arcturus npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-120842

Malicious code in vega-css-loader-json-mensa npm...

EUVD-2025-120132

Malicious code in yaml-ophiuchus-hyperion-style-loader npm...

EUVD-2025-111793

Malicious code in less-loader-element-ui-telesto-uninstall npm...

EUVD-2025-121274

Malicious code in thuban-less-loader-spica-achernar npm...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123515

Malicious code in postcss-loader-quito-iota-commitizen npm...

EUVD-2025-114797

Malicious code in css-loader-procyon-promise-taurus npm...

Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122363

Malicious code in sadr-css-loader-kaus-leda npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-114086

Malicious code in enceladus-css-loader-nuxtjs-eris npm...

EUVD-2025-120603

Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin npm...

EUVD-2025-114727

Malicious code in cygnus-style-loader-sqlite-solis npm...

EUVD-2025-121889

Malicious code in soap-style-loader-eris-rate-limiter npm...

EUVD-2025-114807

Malicious code in css-loader-flare-koa-react-bootstrap npm...

EUVD-2025-115164

Malicious code in commitizen-style-loader-ursa-hugo npm...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...