EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-123517

Malicious code in postcss-loader-oauth-chai-miranda npm...

EUVD-2025-111792

Malicious code in less-loader-hercules-phoenix-miranda npm...

EUVD-2025-115872

Malicious code in bulma-uninstall-loopback-sass-loader npm...

EUVD-2025-113053

Malicious code in grunt-development-postcss-loader-hydra npm...

Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114895

Malicious code in cosmos-postcss-loader-iota-eslint-config npm...

EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

EUVD-2025-111434

Malicious code in markdown-bunyan-sass-loader-altair npm...

EUVD-2025-111794

Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd npm...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115449

Malicious code in chalk-subscription-mutation-less-loader npm...

Malicious code in puppeteer-xenon-style-loader-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b56d70ad52ccda6fd5988d383f8a86e3e219253eb55ac0bbc9f6a1c69a368d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122242

Malicious code in sass-loader-npm-markdownlint-apollo npm...

EUVD-2025-115441

Malicious code in changelog-cosmiconfig-sass-loader-commitlint npm...

Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...