EUVD-2025-122236

Malicious code in sass-loader-zephyr-hexo-zephyr npm...

Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122238

Malicious code in sass-loader-redis-atlas-command npm...

EUVD-2025-122687

Malicious code in release-it-sass-loader-parcel-fork npm...

EUVD-2025-123392

Malicious code in private-cordelia-quark-sass-loader npm...

EUVD-2025-124822

Malicious code in mocha-zenobia-prettier-stylelint-style-loader npm...

EUVD-2025-122248

Malicious code in sass-loader-magellan-build-reveal-md npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120537

Malicious code in webpack-chakra-ui-style-loader-proxima npm...

EUVD-2025-123861

Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...

Malicious code in vuepress-winston-middleware-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8309a318511aca365817442dc6e688949b3c20e8a4fe41511579f3dfd9b29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114727

Malicious code in cygnus-style-loader-sqlite-solis npm...

MAL-2025-146407 Malicious code in postcss-loader-sagitta-dynamo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-cressida-style-loader-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94271e0ad39049b5652876cee88d242361da4605c8f8899fd662c77483075950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

EUVD-2025-122064

Malicious code in semantic-ui-version-cordelia-sass-loader npm...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-scripts-cygnus-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...