EUVD-2025-123578

Malicious code in polaris-galaxy-dione-css-loader npm...

EUVD-2025-120842

Malicious code in vega-css-loader-json-mensa npm...

EUVD-2025-114086

Malicious code in enceladus-css-loader-nuxtjs-eris npm...

EUVD-2025-115453

Malicious code in chalk-run-script-prompts-css-loader npm...

EUVD-2025-115891

Malicious code in bulma-gatsby-gravity-css-loader npm...

Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114803

Malicious code in css-loader-kaus-prettier-plugin-markdown-schema npm...

Malicious code in jekyll-transport-fusion-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122985

Malicious code in quark-sass-loader-tethys-css-loader npm...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114798

Malicious code in css-loader-pm2-meissa-gravity npm...

EUVD-2025-113021

Malicious code in grus-css-loader-ophiuchus-scripts npm...

EUVD-2025-114800

Malicious code in css-loader-octans-acamar-colors npm...

EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144485 Malicious code in local-css-loader-ursa-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d53f49874e4864e74dfa98d9d5a9d4aab907c412463f74c6247ac80cd5a0c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141300 Malicious code in css-loader-cygnus-restart-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...