EUVD-2025-111705

Malicious code in link-gravity-css-loader-arcturus npm...

EUVD-2025-111466

Malicious code in magellan-middleware-protractor-postcss-loader npm...

EUVD-2025-123531

Malicious code in postcss-loader-commitizen-foundation-xenos npm...

EUVD-2025-123524

Malicious code in postcss-loader-halley-middleware-xanadu npm...

EUVD-2025-111858

Malicious code in leda-acamar-sequelize-sass-loader npm...

EUVD-2025-124015

Malicious code in orbit-europa-dorado-postcss-loader npm...

EUVD-2025-122064

Malicious code in semantic-ui-version-cordelia-sass-loader npm...

EUVD-2025-113435

Malicious code in framework-css-loader-enceladus-chai npm...

EUVD-2025-113208

Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar npm...

Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112593

Malicious code in ignite-morgan-postcss-loader-morgan npm...

EUVD-2025-111780

Malicious code in less-loader-stream-publish-aurora npm...

EUVD-2025-122253

Malicious code in sass-loader-gravity-draco-miranda npm...

EUVD-2025-114372

Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...

EUVD-2025-114804

Malicious code in css-loader-hapi-webpack-library npm...

EUVD-2025-113750

Malicious code in exec-sass-loader-acamar-halley npm...

EUVD-2025-114588

Malicious code in delphinus-jwt-vega-style-loader npm...

EUVD-2025-123509

Malicious code in postcss-loader-telesto-vulcan-phenomic npm...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...

EUVD-2025-112074

Malicious code in juno-style-loader-sedna-janus npm...