5991 matches found
Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c446fa252e5b33e711346dee067288e0df024c384c7833c1626571573ed3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112257
Malicious code in jasmine-less-loader-schema-wasat npm...
EUVD-2025-111926
Malicious code in kinetic-typeorm-less-loader-markdownlint npm...
EUVD-2025-111232
Malicious code in metalsmith-mui-less-loader-docusaurus npm...
Malicious code in sirius-sedna-sass-loader-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115453
Malicious code in chalk-run-script-prompts-css-loader npm...
Malicious code in postcss-loader-child-process-element-ui-weywot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124516
Malicious code in nestjs-sass-loader-pegasus-kastra npm...
EUVD-2025-121107
Malicious code in triton-pegasus-less-loader-antares npm...
EUVD-2025-111795
Malicious code in less-loader-despina-helios-websockets npm...
EUVD-2025-123511
Malicious code in postcss-loader-slidev-gulp-bellatrix npm...
EUVD-2025-115891
Malicious code in bulma-gatsby-gravity-css-loader npm...
EUVD-2025-123392
Malicious code in private-cordelia-quark-sass-loader npm...
Malicious code in cluster-css-loader-halley-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120728
Malicious code in vuepress-winston-middleware-sass-loader npm...
EUVD-2025-122289
Malicious code in sagitta-zephyr-andromeda-postcss-loader npm...
EUVD-2025-114803
Malicious code in css-loader-kaus-prettier-plugin-markdown-schema npm...
EUVD-2025-115973
Malicious code in browserify-less-loader-tethys-style-loader npm...