EUVD-2025-114588

Malicious code in delphinus-jwt-vega-style-loader npm...

EUVD-2025-123509

Malicious code in postcss-loader-telesto-vulcan-phenomic npm...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...

EUVD-2025-112074

Malicious code in juno-style-loader-sedna-janus npm...

EUVD-2025-124211

Malicious code in nuxtjs-polaris-google-style-loader npm...

EUVD-2025-121581

Malicious code in style-loader-wolf-elara-nconf npm...

EUVD-2025-120241

Malicious code in xenos-style-loader-transport-electron-builder npm...

EUVD-2025-113529

Malicious code in fork-css-loader-halley-markdown-pdf npm...

EUVD-2025-123053

Malicious code in puppeteer-xenon-style-loader-xml npm...

EUVD-2025-111789

Malicious code in less-loader-lint-staged-csv-local npm...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-113413

Malicious code in frontend-build-css-loader-europa npm...

EUVD-2025-115592

Malicious code in celeste-nebula-less-loader-build npm...

EUVD-2025-124538

Malicious code in neptune-stream-toml-postcss-loader npm...

EUVD-2025-120788

Malicious code in version-miranda-eclipse-sass-loader npm...

EUVD-2025-123756

Malicious code in phoebe-nightmare-npm-less-loader npm...

EUVD-2025-124833

Malicious code in mocha-less-loader-axios-npm npm...

EUVD-2025-121324

Malicious code in testcafe-sass-loader-morgan-package npm...

Malicious code in bunyan-less-loader-tethys-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbc3a3cc8e63e76f314b7ddd68857182ffde9e092dd347c91d634fdb95c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...