EUVD-2025-114634

Malicious code in dagda-less-loader-public-upgrade npm...

EUVD-2025-114467

Malicious code in dione-aurora-less-loader-pegasus npm...

EUVD-2025-115802

Malicious code in callback-package-tethys-less-loader npm...

EUVD-2025-115534

Malicious code in ceres-oberon-less-loader-proxima npm...

EUVD-2025-115513

Malicious code in chai-less-loader-less-repository npm...

EUVD-2025-115392

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...

EUVD-2025-115344

Malicious code in chromedriver-commitlint-norma-less-loader npm...

EUVD-2025-115173

Malicious code in commitizen-less-loader-mysql-html-webpack-plugin npm...

EUVD-2025-115113

Malicious code in commitlint-triton-less-loader-umbra npm...

EUVD-2025-114942

Malicious code in corvus-tethys-elektra-less-loader npm...

EUVD-2025-116465

Malicious code in async-sedna-prompts-less-loader npm...

EUVD-2025-115859

Malicious code in bunyan-less-loader-tethys-playwright npm...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144331 Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142592 Malicious code in fork-less-loader-stream-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116683

Malicious code in antares-less-loader-middleware-sequelize npm...

EUVD-2025-123764

Malicious code in phoebe-lynx-less-loader-passport npm...

EUVD-2025-115973

Malicious code in browserify-less-loader-tethys-style-loader npm...

EUVD-2025-111656

Malicious code in lint-staged-gridsome-less-loader-standard npm...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...