EUVD-2025-120241

Malicious code in xenos-style-loader-transport-electron-builder npm...

EUVD-2025-113784

Malicious code in event-style-loader-quasar-materialize npm...

EUVD-2025-122478

Malicious code in rimraf-auth0-style-loader-xenos npm...

EUVD-2025-115164

Malicious code in commitizen-style-loader-ursa-hugo npm...

MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148344 Malicious code in style-loader-wolf-elara-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797680a710ec1984e98fab2b185ba656f47c264af598ba861fce43bd6dd7b5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121584

Malicious code in style-loader-sass-loader-public-hermes npm...

EUVD-2025-121582

Malicious code in style-loader-start-cressida-passport npm...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121472

Malicious code in tailwindcss-style-loader-corvus-mensa npm...

EUVD-2025-123746

Malicious code in phoebe-rehype-style-loader-nightwatch npm...

EUVD-2025-123190

Malicious code in proxima-proxima-relay-style-loader npm...

StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak

Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...

Malicious code in rina-peyek96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa40866ce59a1c450ae4cd293804269fe7598cdc9eb4742969cc46e3efc68ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-miebogor53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbbb051f424f4dcff4c4bf77cdce46b3f2de93562cc6a0551cd4a0be09c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199d3300f5957611c774a013976d215b13e48a506f878ec6402f146ff57a4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jus80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69c975b1f8f1cec28bd0f790997b54f4d7b3a3e8d9ba91ecca190fdb0ad2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...