EUVD-2025-122345

Malicious code in sadr-scripts-css-loader-version npm...

MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141307 Malicious code in css-loader-metalsmith-rest-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005841e6161cc0f0146a62615f6eae5c47197caabf44e0ba61f55a86dabe8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141608 Malicious code in despina-regulus-css-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1aab80e4cce0b81ff5effcff1de0ccec604fd14553e05141f232ef3aa99ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143312 Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146343 Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-grus-css-loader-package (npm)

The package hercules-grus-css-loader-package was found to contain malicious code...

MAL-2025-43876 Malicious code in commitlint-sedimentology-got-css-loader (npm)

The package commitlint-sedimentology-got-css-loader was found to contain malicious code...

MAL-2025-45990 Malicious code in selenology-biohacking-css-loader-planckscale (npm)

The package selenology-biohacking-css-loader-planckscale was found to contain malicious code...

Malicious code in nestjs-uranology-weywot-css-loader (npm)

The package nestjs-uranology-weywot-css-loader was found to contain malicious code...

Malicious code in commitlint-sedimentology-got-css-loader (npm)

The package commitlint-sedimentology-got-css-loader was found to contain malicious code...

Malicious code in selenology-biohacking-css-loader-planckscale (npm)

The package selenology-biohacking-css-loader-planckscale was found to contain malicious code...

MAL-2025-45296 Malicious code in nestjs-uranology-weywot-css-loader (npm)

The package nestjs-uranology-weywot-css-loader was found to contain malicious code...

Malicious code in steganography-dactyl-css-loader-radiometric (npm)

The package steganography-dactyl-css-loader-radiometric was found to contain malicious code...

Malicious code in style-loader-nextjs-css-loader-gemini (npm)

The package style-loader-nextjs-css-loader-gemini was found to contain malicious code...

Malicious code in bunyan-sync-css-loader-quasarjet (npm)

The package bunyan-sync-css-loader-quasarjet was found to contain malicious code...

Malicious code in geckodriver-pipe-quasar-css-loader (npm)

The package geckodriver-pipe-quasar-css-loader was found to contain malicious code...

Malicious code in loopback-css-loader-sagitta-terraforming (npm)

The package loopback-css-loader-sagitta-terraforming was found to contain malicious code...