8818 matches found
Malicious code in sass-loader-jovian-axios-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sass-loader-bulma-eleventy-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in soap-sass-loader-sirius-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121414
Malicious code in terser-css-loader-mongoose-acamar npm...
EUVD-2025-115579
Malicious code in centauri-element-ui-stream-sass-loader npm...
EUVD-2025-115223
Malicious code in comet-parcel-perseus-postcss-loader npm...
EUVD-2025-113053
Malicious code in grunt-development-postcss-loader-hydra npm...
Malicious code in sass-loader-lacerta-axios-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114809
Malicious code in css-loader-cygnus-restart-cluster npm...
MAL-2025-147663 Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc8eca7c38080fbb463c3fef2953cb87fce95338e8574846d4a53c9f715036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116554
Malicious code in aquarius-sass-loader-morgan-unuk npm...
EUVD-2025-121948
Malicious code in sirius-sedna-sass-loader-mongoose npm...
MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121086
Malicious code in typeorm-css-loader-draco-docusaurus npm...
MAL-2025-142758 Malicious code in gacrux-css-loader-puppeteer-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ffaafe4f44d319ebfb460879e4201884b8b653ca7ccaa102f814685839875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...