EUVD-2025-179450

Malicious code in csv-mongodb-rehype-less-loader npm...

MAL-2025-185905 Malicious code in boson-style-loader-less-loader-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f50bd5b7c71fb5520c30b341fe247f8acbf2e602197b32e39a8de63489160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175439

Malicious code in yonder-less-loader-ini-auth npm...

EUVD-2025-178075

Malicious code in lint-less-loader-jekyll-virgo npm...

EUVD-2025-178342

Malicious code in iota-less-loader-commitlint-config-angular-private npm...

EUVD-2025-178123

Malicious code in less-loader-sedna-blaze-commitizen npm...

Malicious code in csv-mongodb-rehype-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f821738c4cf7c99d8107896b24f9a81bd00506c105a6aca07ef8a729d5d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178271

Malicious code in jovian-less-loader-draco-wasat npm...

MAL-2025-187758 Malicious code in less-loader-rocket-adonis-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb348d5f9f6c382b7097d3a12d16dbd64c584ad9d700b67e646aaaba37f84a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-gulp-yaml-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175597

Malicious code in webdriverio-less-loader-relay-venus npm...

EUVD-2025-176078

Malicious code in tachyon-asthenosphere-less-loader-dagda npm...

EUVD-2025-176204

Malicious code in stop-chalk-build-less-loader npm...

EUVD-2025-124721

Malicious code in mui-cosmos-less-loader-duplex npm...

EUVD-2025-111796

Malicious code in less-loader-cross-env-nebula-ceres npm...

Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c446fa252e5b33e711346dee067288e0df024c384c7833c1626571573ed3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112257

Malicious code in jasmine-less-loader-schema-wasat npm...

EUVD-2025-111795

Malicious code in less-loader-despina-helios-websockets npm...

Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...