8814 matches found
EUVD-2025-122589
Malicious code in resolvers-registry-less-loader-phoenix npm...
EUVD-2025-122240
Malicious code in sass-loader-quasar-transport-upgrade npm...
EUVD-2025-121446
Malicious code in taurus-uninstall-commitizen-postcss-loader npm...
EUVD-2025-111979
Malicious code in kastra-style-loader-scorpius-mui npm...
EUVD-2025-122261
Malicious code in sass-loader-callback-oauth-sagitta npm...
EUVD-2025-122255
Malicious code in sass-loader-foundation-jsonp-react-bootstrap npm...
Malicious code in hermes-css-loader-request-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fork-less-loader-stream-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122256
Malicious code in sass-loader-forever-vulcan-mysql npm...
EUVD-2025-123746
Malicious code in phoebe-rehype-style-loader-nightwatch npm...
EUVD-2025-123817
Malicious code in perseus-postcss-loader-janus-gacrux npm...
Malicious code in postcss-loader-mutation-command-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149228 Malicious code in vulcan-css-loader-command-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phoebe-sass-loader-luna-reveal-md (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-loader-commitizen-foundation-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149205 Malicious code in vuetify-corvus-style-loader-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ac5d8f4ef4da0a521cba19e091fddec521d67a7137b05c43cef813e61cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fusion-geckodriver-server-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...