8174 matches found
MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188784 Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d9e1ff0973c423e2d9f4461d9daf809ea0aa47669997b06f7a4589bfbc9396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-hexo-sqlite-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179468
Malicious code in css-loader-castor-supervisor-elara npm...
EUVD-2025-177392
Malicious code in package-changelog-css-loader-slidev npm...
EUVD-2025-177167
Malicious code in pino-pretty-radiant-less-loader-galaxy npm...
Malicious code in sass-loader-iota-lyra-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3ffd8977035d4a0def8ba740d894f180ef6f02e00fdfd2d89633e773386f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177824
Malicious code in mira-fusion-yildun-css-loader npm...
EUVD-2025-178671
Malicious code in graviton-hapi-less-loader-electron npm...
MAL-2025-188058 Malicious code in mira-fusion-yildun-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177120
Malicious code in plutology-sass-loader-mongoose-extremophile npm...
EUVD-2025-178348
Malicious code in iota-betelgeuse-rest-sass-loader npm...
Malicious code in supercluster-command-betelgeuse-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in algol-elektra-rollup-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189866 Malicious code in terser-postcss-loader-bunyan-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8535f78567524d8b9c6926e20120a445a55b1ab1f7a69b7db5f380940c2fd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xo-morgan-css-loader-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175718
Malicious code in virgo-css-loader-whitedwarf-mongoose npm...
EUVD-2025-177096
Malicious code in postcss-loader-ganymede-metalsmith-farout npm...