5987 matches found
MAL-2025-188755 Malicious code in plutology-sass-loader-mongoose-extremophile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5143ce37789b72ee505bcbf926f1c3450ee28736cce04aeca84e1eb9010bbbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176518
Malicious code in sass-loader-prompts-inquirer-blaze npm...
MAL-2025-189357 Malicious code in sass-loader-prompts-inquirer-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510e31e6aebe1ba6798f088e0772983d71667602f005659f7f54fddb9b9facd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180408
Malicious code in antd-style-loader-miranda-uninstall npm...
EUVD-2025-178041
Malicious code in local-terser-postcss-loader-eventhoriz npm...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
EUVD-2025-179276
Malicious code in dorado-hexo-sqlite-postcss-loader npm...
MAL-2025-186704 Malicious code in electron-postcss-loader-yaml-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177392
Malicious code in package-changelog-css-loader-slidev npm...
EUVD-2025-178348
Malicious code in iota-betelgeuse-rest-sass-loader npm...
EUVD-2025-177167
Malicious code in pino-pretty-radiant-less-loader-galaxy npm...
EUVD-2025-177092
Malicious code in postcss-loader-prosthetics-loopback-javascript npm...
EUVD-2025-176521
Malicious code in sass-loader-fornax-passport-geoarchaeology npm...
EUVD-2025-179961
Malicious code in buffer-css-loader-draco-sirius npm...
Malicious code in buffer-css-loader-draco-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in graviton-hapi-less-loader-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...