MAL-2025-147756 Malicious code in sedna-carpo-command-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a24b4b00f49c87b40537793e078710621ed57e859a9a24b4c06e73f4a01690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120740

Malicious code in vortex-postcss-loader-auriga-webpack npm...

EUVD-2025-121880

Malicious code in socketio-auriga-native-less-loader npm...

EUVD-2025-121758

Malicious code in spica-magellan-css-loader-eslint npm...

EUVD-2025-121101

Malicious code in triton-scripts-cygnus-css-loader npm...

Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121582

Malicious code in style-loader-start-cressida-passport npm...

EUVD-2025-122252

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...

EUVD-2025-114501

Malicious code in despina-regulus-css-loader-antares npm...

EUVD-2025-114634

Malicious code in dagda-less-loader-public-upgrade npm...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111968

Malicious code in kaus-hapi-css-loader-polaris npm...

EUVD-2025-111628

Malicious code in local-galaxy-css-loader-chariklo npm...

EUVD-2025-123387

Malicious code in private-node-config-less-loader-parcel npm...

EUVD-2025-124654

Malicious code in mysql-superagent-less-loader-vuetify npm...

EUVD-2025-115859

Malicious code in bunyan-less-loader-tethys-playwright npm...

EUVD-2025-123523

Malicious code in postcss-loader-luna-eslint-despina npm...

EUVD-2025-120224

Malicious code in xerxes-gridsome-postcss-loader-google npm...

Malicious code in triton-antares-less-loader-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273c8b125ae3a710862623f732348e71085c0b00cb12696b43074fd6128179d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...