6028 matches found
EUVD-2025-111791
Malicious code in less-loader-jekyll-deneb-luna npm...
EUVD-2025-120710
Malicious code in vuetify-postcss-loader-mongodb-less npm...
EUVD-2025-121767
Malicious code in spica-css-loader-testcafe-backend npm...
Malicious code in spica-css-loader-testcafe-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121472
Malicious code in tailwindcss-style-loader-corvus-mensa npm...
EUVD-2025-124296
Malicious code in non-blocking-style-loader-grus-slidev npm...
EUVD-2025-114200
Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...
EUVD-2025-116128
Malicious code in betelgeuse-css-loader-luna-dactyl npm...
EUVD-2025-112388
Malicious code in iota-fomalhaut-less-loader-repository npm...
EUVD-2025-113945
Malicious code in eris-chakra-ui-sass-loader-fornax npm...
EUVD-2025-122239
Malicious code in sass-loader-rate-limiter-aurora-playwright npm...
EUVD-2025-116330
Malicious code in avior-kaus-sass-loader-pegasus npm...
EUVD-2025-113812
Malicious code in europa-vuepress-sass-loader-graphql npm...
Malicious code in gemini-arcturus-ursa-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111845
Malicious code in leda-envconfig-odin-sass-loader npm...
EUVD-2025-123510
Malicious code in postcss-loader-style-loader-foundation-ariel npm...
EUVD-2025-116683
Malicious code in antares-less-loader-middleware-sequelize npm...
Malicious code in commitlint-triton-less-loader-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...