207 matches found
Malicious Package
Overview lint-staged-gridsome-less-loader-standard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious code in jest-less-loader (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in less-loader-grus-void-biosignature (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in less-loader-gulp-yaml-crust (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yonder-less-loader-ini-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...
EUVD-2025-176282
Malicious code in spawn-auth0-less-loader-phoenix npm...
EUVD-2025-176204
Malicious code in stop-chalk-build-less-loader npm...
EUVD-2025-176078
Malicious code in tachyon-asthenosphere-less-loader-dagda npm...
EUVD-2025-175597
Malicious code in webdriverio-less-loader-relay-venus npm...
EUVD-2025-177680
Malicious code in nebula-development-less-loader-achernar npm...
EUVD-2025-177837
Malicious code in mineralogy-less-loader-dagda-global npm...
EUVD-2025-178342
Malicious code in iota-less-loader-commitlint-config-angular-private npm...
EUVD-2025-178271
Malicious code in jovian-less-loader-draco-wasat npm...
EUVD-2025-178128
Malicious code in less-loader-grus-void-biosignature npm...
EUVD-2025-178127
Malicious code in less-loader-gulp-yaml-crust npm...
EUVD-2025-178126
Malicious code in less-loader-orbit-outercore-graphql npm...