EUVD-2025-116343

Malicious code in auth0-style-loader-polaris-gridsome npm...

EUVD-2025-111799

Malicious code in less-loader-centauri-subscription-config npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-115439

Malicious code in changelog-epimetheus-playwright-style-loader npm...

EUVD-2025-115302

Malicious code in cli-npm-postcss-loader-juno npm...

EUVD-2025-120603

Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin npm...

EUVD-2025-114806

Malicious code in css-loader-gatsby-oberon-got npm...

EUVD-2025-111779

Malicious code in less-loader-terser-umbra-regulus npm...

EUVD-2025-112787

Malicious code in hermes-request-antares-less-loader npm...

EUVD-2025-123528

Malicious code in postcss-loader-elara-izar-pino-pretty npm...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111378

Malicious code in materialize-css-loader-install-dagda npm...

EUVD-2025-112423

Malicious code in install-uninstall-mira-sass-loader npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-122757

Malicious code in rehype-css-loader-metalsmith-carina npm...

EUVD-2025-116554

Malicious code in aquarius-sass-loader-morgan-unuk npm...

EUVD-2025-122259

Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha npm...

EUVD-2025-115344

Malicious code in chromedriver-commitlint-norma-less-loader npm...

EUVD-2025-121274

Malicious code in thuban-less-loader-spica-achernar npm...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...