6028 matches found
EUVD-2025-115507
Malicious code in chai-postcss-loader-subscription-epimetheus npm...
MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123438
Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 npm...
EUVD-2025-120537
Malicious code in webpack-chakra-ui-style-loader-proxima npm...
EUVD-2025-121718
Malicious code in spinner-postcss-loader-yakutsk-venus npm...
EUVD-2025-114796
Malicious code in css-loader-quantum-eslint-betelgeuse npm...
EUVD-2025-114551
Malicious code in deneb-scorpius-style-loader-morgan npm...
Malicious code in gemini-postcss-loader-quantum-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123828
Malicious code in perseus-less-loader-arcturus-telesto npm...
Malicious code in css-loader-gatsby-oberon-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123011
Malicious code in quantum-parcel-tailwindcss-less-loader npm...
EUVD-2025-115747
Malicious code in canopus-hermes-postcss-loader-xanthus npm...
Malicious code in postcss-loader-sagitta-dynamo-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fusion-geckodriver-server-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in neptune-stream-toml-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122245
Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...
EUVD-2025-123104
Malicious code in publish-taurus-css-loader-mensa npm...
EUVD-2025-124051
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql npm...