217 matches found
EUVD-2025-114806
Malicious code in css-loader-gatsby-oberon-got npm...
EUVD-2025-114805
Malicious code in css-loader-gridsome-postcss-loader-yaml npm...
EUVD-2025-114804
Malicious code in css-loader-hapi-webpack-library npm...
EUVD-2025-114802
Malicious code in css-loader-metalsmith-rest-tailwindcss npm...
EUVD-2025-114800
Malicious code in css-loader-octans-acamar-colors npm...
EUVD-2025-114799
Malicious code in css-loader-phenomic-phoebe-node-config npm...
EUVD-2025-114797
Malicious code in css-loader-procyon-promise-taurus npm...
EUVD-2025-114796
Malicious code in css-loader-quantum-eslint-betelgeuse npm...
EUVD-2025-114794
Malicious code in css-loader-reveal-md-non-blocking-nightwatch npm...
EUVD-2025-114793
Malicious code in css-loader-soap-elektra-andromeda npm...
EUVD-2025-114791
Malicious code in css-loader-tailwindcss-sadr-prompts npm...
EUVD-2025-114790
Malicious code in css-loader-terser-rimraf-lyra npm...
EUVD-2025-114200
Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...
EUVD-2025-115286
Malicious code in cluster-css-loader-halley-cressida npm...
EUVD-2025-115049
Malicious code in configstore-prettier-css-loader-neptune npm...
EUVD-2025-116342
Malicious code in auth0-weywot-colors-css-loader npm...
EUVD-2025-116128
Malicious code in betelgeuse-css-loader-luna-dactyl npm...
EUVD-2025-116753
Malicious code in altair-css-loader-fornax-nightmare npm...
MAL-2025-144607 Malicious code in lyra-eleventy-phenomic-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781feae0250f509d58698804ac377422ae24d83a75e63818a4dd45c7520a7fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...