7525 matches found
MAL-2025-143312 Malicious code in hermes-css-loader-request-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141309 Malicious code in css-loader-octans-acamar-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143699 Malicious code in io-hercules-css-loader-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147984 Malicious code in slides-css-loader-callisto-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e15db063ad96961c26caa1aa5ee053211e5e9c88abed26b2e9f9f82a5714bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146163 Malicious code in phoebe-mongodb-css-loader-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147577 Malicious code in sadr-scripts-css-loader-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668623a90f94b66ef71705f830dfabd5f69de9d20153943ba3999737523cf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146349 Malicious code in polaris-jabbah-hermes-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89da1dae41a7ae32c18eca5e6979e685dd654c9c55d76cee9c556388ceaa2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141327 Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3695ac089a989128e4b219331d647e5f45cf2b19e34bdf28bb8578d708503fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114792
Malicious code in css-loader-spinner-hermes-hydra npm...
EUVD-2025-124064
Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...
EUVD-2025-113313
Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader npm...
EUVD-2025-124062
Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon npm...
Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0da98e288028234148488a2f636cdb4fc065991d201ef07a51cd9f0f2ae7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spica-css-loader-testcafe-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122694
Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin npm...