EUVD-2025-122289

Malicious code in sagitta-zephyr-andromeda-postcss-loader npm...

EUVD-2025-121021

Malicious code in ultra-sass-loader-pegasus-auriga npm...

Malicious code in tailwindcss-sass-loader-markdown-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115223

Malicious code in comet-parcel-perseus-postcss-loader npm...

EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

EUVD-2025-112585

Malicious code in ignite-sqlite-celeste-sass-loader npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

EUVD-2025-123255

Malicious code in prompts-less-loader-child-process-sedna npm...

MAL-2025-147396 Malicious code in restart-style-loader-farout-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acb30839fa2bf4533553ea8036a3328332f701c3536ff9d79c3f553ab5826e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114797

Malicious code in css-loader-procyon-promise-taurus npm...

EUVD-2025-114807

Malicious code in css-loader-flare-koa-react-bootstrap npm...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120132

Malicious code in yaml-ophiuchus-hyperion-style-loader npm...

MAL-2025-146869 Malicious code in puppeteer-xenon-style-loader-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b56d70ad52ccda6fd5988d383f8a86e3e219253eb55ac0bbc9f6a1c69a368d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139588 Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115164

Malicious code in commitizen-style-loader-ursa-hugo npm...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146402 Malicious code in postcss-loader-nightwatch-hugo-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4beacd28628662157313c1228b2e5d2f837b744c07aa98fb2107f178cad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146400 Malicious code in postcss-loader-mini-css-extract-plugin-development-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06bf6d7f07b3ed2d9691b5bcc6b10f80b6a8691b343b4cc3ba50758e2edf9632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140935 Malicious code in commitizen-less-loader-mysql-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b0ecbb57fc6d6f24d993aca7226c40313a8afa4b924e0eff9c1058e3b64581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...