MAL-2025-144485 Malicious code in local-css-loader-ursa-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d53f49874e4864e74dfa98d9d5a9d4aab907c412463f74c6247ac80cd5a0c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111628

Malicious code in local-galaxy-css-loader-chariklo npm...

EUVD-2025-123104

Malicious code in publish-taurus-css-loader-mensa npm...

Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115453

Malicious code in chalk-run-script-prompts-css-loader npm...

EUVD-2025-115891

Malicious code in bulma-gatsby-gravity-css-loader npm...

EUVD-2025-115286

Malicious code in cluster-css-loader-halley-cressida npm...

Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112817

Malicious code in hercules-server-airbnb-css-loader npm...

EUVD-2025-114807

Malicious code in css-loader-flare-koa-react-bootstrap npm...

EUVD-2025-113349

Malicious code in gacrux-dagda-koa-css-loader npm...

Malicious code in triton-scripts-cygnus-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114790

Malicious code in css-loader-terser-rimraf-lyra npm...

EUVD-2025-124460

Malicious code in nightwatch-css-loader-charon-gemini npm...

EUVD-2025-111502

Malicious code in lyra-leda-css-loader-orbit npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

EUVD-2025-111630

Malicious code in local-css-loader-ursa-venus npm...

EUVD-2025-124854

Malicious code in miranda-yonder-css-loader-hercules npm...