MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144331 Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142592 Malicious code in fork-less-loader-stream-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145710 Malicious code in nuxtjs-polaris-google-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a059d4f6f8befc217803d2bc110b92360c80662b5242c31399896692d4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148260 Malicious code in standard-style-loader-flare-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9ab2321a1d8bba1e68a004f01d1aa6a51d88faeedf9b2d448f214e64125d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123764

Malicious code in phoebe-lynx-less-loader-passport npm...

EUVD-2025-112276

Malicious code in janus-style-loader-alphard-remark npm...

MAL-2025-142165 Malicious code in eris-chakra-ui-sass-loader-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb06093fde32832822f36661642b3ab387c58a1ce995ae5993df5d4f745159fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148344 Malicious code in style-loader-wolf-elara-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797680a710ec1984e98fab2b185ba656f47c264af598ba861fce43bd6dd7b5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146104 Malicious code in perseus-postcss-loader-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717f2f2ac452204d81ca2f4247e7b08e40a0486176508635e3a9a8711d883ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146343 Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141913 Malicious code in electron-eslint-aether-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1f7548f783c12e5c8d0c42b73eac3624796ce6e399f4eba565d01f3f352840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...