8810 matches found
MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-loader-commitizen-foundation-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116330
Malicious code in avior-kaus-sass-loader-pegasus npm...
Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149205 Malicious code in vuetify-corvus-style-loader-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ac5d8f4ef4da0a521cba19e091fddec521d67a7137b05c43cef813e61cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fusion-geckodriver-server-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115872
Malicious code in bulma-uninstall-loopback-sass-loader npm...
Malicious code in rimraf-auth0-style-loader-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63113711f441b7dfc1f3e59d618a2408c9b5ac7a3aa57122ecdcb81c93c39353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122515
Malicious code in reveal-md-flare-kastra-css-loader npm...
EUVD-2025-114230
Malicious code in elara-jovian-fornax-sass-loader npm...
EUVD-2025-114221
Malicious code in elara-style-loader-comet-async npm...
EUVD-2025-115302
Malicious code in cli-npm-postcss-loader-juno npm...
MAL-2025-140763 Malicious code in chromedriver-commitlint-norma-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4390bddba6c156cdbddcb8d6bc99d4da0ef1749ac02717b10d2e53803f68fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-loader-pegasus-registry-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111533
Malicious code in luna-sass-loader-centaurus-aether npm...
EUVD-2025-122144
Malicious code in sedna-nightwatch-postcss-loader-mini-css-extract-plugin npm...
EUVD-2025-114339
Malicious code in dotenv-safe-postcss-loader-taurus-webpack npm...
Malicious code in gemini-arcturus-ursa-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...