MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124854

Malicious code in miranda-yonder-css-loader-hercules npm...

EUVD-2025-120945

Malicious code in unuk-sass-loader-nuxtjs-buffer npm...

EUVD-2025-124701

Malicious code in mutation-bunyan-materialize-style-loader npm...

EUVD-2025-122249

Malicious code in sass-loader-leda-spica-antares npm...

EUVD-2025-122251

Malicious code in sass-loader-jovian-axios-framework npm...

EUVD-2025-122197

Malicious code in scripts-blaze-css-loader-venus npm...

EUVD-2025-121940

Malicious code in slides-geckodriver-sass-loader-webpack npm...

EUVD-2025-122252

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...

EUVD-2025-122260

Malicious code in sass-loader-cassini-socketio-wasat npm...

EUVD-2025-120728

Malicious code in vuepress-winston-middleware-sass-loader npm...

EUVD-2025-123489

Malicious code in postgres-geckodriver-less-loader-quark npm...

Malicious code in wasat-cli-barnard-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e5dd212b62e122019aa03288e721c9ebc41f26fbc902e00502ce9f915a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111793

Malicious code in less-loader-element-ui-telesto-uninstall npm...

EUVD-2025-122259

Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha npm...

Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

MAL-2025-141177 Malicious code in cosmiconfig-cressida-style-loader-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94271e0ad39049b5652876cee88d242361da4605c8f8899fd662c77483075950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...