6030 matches found
EUVD-2025-123053
Malicious code in puppeteer-xenon-style-loader-xml npm...
EUVD-2025-111152
Malicious code in middleware-postcss-loader-vulcan-configstore npm...
EUVD-2025-123190
Malicious code in proxima-proxima-relay-style-loader npm...
EUVD-2025-113750
Malicious code in exec-sass-loader-acamar-halley npm...
Malicious code in rimraf-auth0-style-loader-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63113711f441b7dfc1f3e59d618a2408c9b5ac7a3aa57122ecdcb81c93c39353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112074
Malicious code in juno-style-loader-sedna-janus npm...
EUVD-2025-113435
Malicious code in framework-css-loader-enceladus-chai npm...
EUVD-2025-121593
Malicious code in style-loader-mini-css-extract-plugin-warp-perseus npm...
EUVD-2025-121582
Malicious code in style-loader-start-cressida-passport npm...
MAL-2025-145710 Malicious code in nuxtjs-polaris-google-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a059d4f6f8befc217803d2bc110b92360c80662b5242c31399896692d4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122722
Malicious code in relay-iota-sass-loader-enceladus npm...
EUVD-2025-113585
Malicious code in flare-grunt-sass-loader-callback npm...
Malicious code in sass-loader-bulma-eleventy-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121880
Malicious code in socketio-auriga-native-less-loader npm...
EUVD-2025-112842
Malicious code in hercules-async-sync-less-loader npm...
EUVD-2025-121472
Malicious code in tailwindcss-style-loader-corvus-mensa npm...
EUVD-2025-121767
Malicious code in spica-css-loader-testcafe-backend npm...