8174 matches found
MAL-2025-185921 Malicious code in buffer-css-loader-draco-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188329 Malicious code in nodejs-sass-loader-carina-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ff8f4ea5bf2c844ec1c897f02f47338bcfb40fdbe2cf01b0b824f0c1c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187211 Malicious code in graviton-hapi-less-loader-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mira-fusion-yildun-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177094
Malicious code in postcss-loader-install-thuban-pipe npm...
Malicious code in rest-neptune-style-loader-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e73cc4d0f5853887957b7f07654dbc5a175c704973e120419196dc6b0c2b0e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178978
Malicious code in exoplanet-izar-superposition-style-loader npm...
EUVD-2025-178549
Malicious code in hercules-css-loader-restart-eslint-plugin npm...
MAL-2025-185905 Malicious code in boson-style-loader-less-loader-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f50bd5b7c71fb5520c30b341fe247f8acbf2e602197b32e39a8de63489160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187758 Malicious code in less-loader-rocket-adonis-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb348d5f9f6c382b7097d3a12d16dbd64c584ad9d700b67e646aaaba37f84a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189177 Malicious code in remark-io-sass-loader-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-180459
Malicious code in algol-elektra-rollup-style-loader npm...
EUVD-2025-177364
Malicious code in paleoecology-backend-hydrogeology-postcss-loader npm...
Malicious code in buffer-css-loader-draco-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179673
Malicious code in colors-style-loader-bellatrix-tool npm...
MAL-2025-187067 Malicious code in fusion-postcss-loader-supercluster-biohacking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dc4a5c17ace9f40ad7f1fd6da92459fd78712491da86cdf24cdb0f3e04ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...