EUVD-2025-123526

Malicious code in postcss-loader-fork-levels-venus npm...

EUVD-2025-122257

Malicious code in sass-loader-corvus-kastra-jest npm...

Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123255

Malicious code in prompts-less-loader-child-process-sedna npm...

EUVD-2025-111780

Malicious code in less-loader-stream-publish-aurora npm...

EUVD-2025-123438

Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 npm...

EUVD-2025-123190

Malicious code in proxima-proxima-relay-style-loader npm...

EUVD-2025-120701

Malicious code in vulcan-css-loader-command-nconf npm...

EUVD-2025-115973

Malicious code in browserify-less-loader-tethys-style-loader npm...

MAL-2025-142912 Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123758

Malicious code in phoebe-mongodb-css-loader-inquirer npm...

EUVD-2025-121919

Malicious code in slidev-io-bellatrix-sass-loader npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114626

Malicious code in dagda-repository-postcss-loader-wolf npm...

EUVD-2025-114428

Malicious code in docusaurus-websockets-sass-loader-upgrade npm...

Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...