EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

EUVD-2025-114797

Malicious code in css-loader-procyon-promise-taurus npm...

EUVD-2025-122985

Malicious code in quark-sass-loader-tethys-css-loader npm...

EUVD-2025-114517

Malicious code in despina-css-loader-update-ganymede npm...

EUVD-2025-114794

Malicious code in css-loader-reveal-md-non-blocking-nightwatch npm...

EUVD-2025-114804

Malicious code in css-loader-hapi-webpack-library npm...

EUVD-2025-114806

Malicious code in css-loader-gatsby-oberon-got npm...

EUVD-2025-111508

Malicious code in lyra-eleventy-phenomic-css-loader npm...

EUVD-2025-116753

Malicious code in altair-css-loader-fornax-nightmare npm...

EUVD-2025-123578

Malicious code in polaris-galaxy-dione-css-loader npm...

Malicious code in miranda-yonder-css-loader-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124899

Malicious code in miranda-ariel-metalsmith-css-loader npm...

EUVD-2025-114803

Malicious code in css-loader-kaus-prettier-plugin-markdown-schema npm...

EUVD-2025-114798

Malicious code in css-loader-pm2-meissa-gravity npm...

EUVD-2025-120701

Malicious code in vulcan-css-loader-command-nconf npm...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116148

Malicious code in bellatrix-protractor-fomalhaut-css-loader npm...

EUVD-2025-116307

Malicious code in await-css-loader-neptune-cosmiconfig npm...

Malicious code in quito-superagent-juno-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a10782480dd1083312e2d21113d97e733a202a0f6478b6ae20c3eaac52cc6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123283

Malicious code in promise-galaxy-express-css-loader npm...