MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146406 Malicious code in postcss-loader-quito-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff2bf6dc026adfb7fcf087d65584c298b75dd1842c5baff878381350cd0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121791

Malicious code in spectron-webdriver-less-loader-jest-gridsome npm...

EUVD-2025-121718

Malicious code in spinner-postcss-loader-yakutsk-venus npm...

EUVD-2025-111782

Malicious code in less-loader-sqlite-cressida-leda npm...

EUVD-2025-114796

Malicious code in css-loader-quantum-eslint-betelgeuse npm...

EUVD-2025-121298

Malicious code in tethys-polaris-sass-loader-prettier-stylelint npm...

EUVD-2025-114551

Malicious code in deneb-scorpius-style-loader-morgan npm...

Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123828

Malicious code in perseus-less-loader-arcturus-telesto npm...

EUVD-2025-111781

Malicious code in less-loader-stream-apollo-impulse npm...

EUVD-2025-120144

Malicious code in yaml-eslint-eslint-style-loader npm...

Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sedna-css-loader-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ebf2af811d1202c068480a5d5d14bfd24d336da782807d0ce9b3dabb926499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

MAL-2025-147841 Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146766 Malicious code in public-postcss-loader-nconf-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8486c705b8b7152ab39cebfac6f20436a00b56f90d0140031aca814832186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146008 Malicious code in pavo-registry-sass-loader-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f61238fa21b5f97c0b5d267d86f8ed1bb47f8660f3e7420aeef43de1cf3251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...