Lucene search
+L

8368 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in css-loader-quito-soap-ursa (npm)

The package css-loader-quito-soap-ursa was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in css-loader-spinner-proxima-cassini (npm)

The package css-loader-spinner-proxima-cassini was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in css-loader-castor-supervisor-elara (npm)

Source: amazon-inspector 193b52bbac9dd8c437627cdd8702135559f279b67db8494364cbc1d7a07bfec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in css-loader-google-jabbah-orbit (npm)

The package css-loader-google-jabbah-orbit was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•5 views

Malicious code in css-loader-dione-barnard-slidev (npm)

Source: amazon-inspector dc2fcde06f546bb49c94f3bba2da60527bd8f2a6c3988c49f29ef8ab3ebc4f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in css-blocks-ember (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in css-loader-flare-koa-react-bootstrap (npm)

Source: amazon-inspector 757095f6eeee22ca60e02e83c47e7f28d41da7de62f3a79bc715068c9999fbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in css-loader-cygnus-restart-cluster (npm)

Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in css-framework-test (npm)

The package css-framework-test was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in css-loader-gatsby-oberon-got (npm)

Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•4 views

Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•6 views

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•4 views

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 368597f4fc071540df5055bfc1b610466dcee895e63bbc57931f47cc3a3f0769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•4 views

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•3 views

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•4 views

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•4 views

Malicious code in configstore-prettier-css-loader-neptune (npm)

Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:16 a.m.•4 views

Malicious code in commitlint-sedimentology-got-css-loader (npm)

The package commitlint-sedimentology-got-css-loader was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:15 a.m.•3 views

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder