8182 matches found
EUVD-2025-176129
Malicious code in supercluster-command-betelgeuse-style-loader npm...
EUVD-2025-178426
Malicious code in indus-coronalmassejection-sass-loader-virgo npm...
EUVD-2025-178395
Malicious code in inquirer-flare-sass-loader-tectonic npm...
EUVD-2025-178127
Malicious code in less-loader-gulp-yaml-crust npm...
EUVD-2025-179082
Malicious code in equinox-sass-loader-global-nestjs npm...
EUVD-2025-179178
Malicious code in electron-postcss-loader-yaml-pyxis npm...
MAL-2025-188779 Malicious code in postcss-loader-ganymede-metalsmith-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d3d14c13f394da725b8d17c124c9aa3305c6a8dff021d59ab3c8fcc8fb610c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176698
Malicious code in remark-io-sass-loader-changelog npm...
EUVD-2025-178818
Malicious code in fusion-gravity-css-loader-perseus npm...
MAL-2025-186415 Malicious code in css-loader-iota-celeste-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a6b13fa0fe3ce78be3d5056c24ebef487000d78e816da9cf71322e731db798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178126
Malicious code in less-loader-orbit-outercore-graphql npm...
EUVD-2025-177551
Malicious code in nodemon-css-loader-husky-parcel npm...
EUVD-2025-178160
Malicious code in lacerta-style-loader-mini-css-extract-plugin-less npm...
EUVD-2025-177097
Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv npm...
EUVD-2025-178342
Malicious code in iota-less-loader-commitlint-config-angular-private npm...
EUVD-2025-175436
Malicious code in yonder-sass-loader-firebase-cosmicsilence npm...
EUVD-2025-180331
Malicious code in ariel-backend-css-loader-aldebaran npm...
Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187487 Malicious code in inquirer-flare-sass-loader-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9ac73491da4c0bbc3063c9fee7d300beb6e658c1d0164abc26edafd86238d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...