8060 matches found
MAL-2025-185921 Malicious code in buffer-css-loader-draco-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188329 Malicious code in nodejs-sass-loader-carina-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ff8f4ea5bf2c844ec1c897f02f47338bcfb40fdbe2cf01b0b824f0c1c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179673
Malicious code in colors-style-loader-bellatrix-tool npm...
EUVD-2025-178127
Malicious code in less-loader-gulp-yaml-crust npm...
MAL-2025-188755 Malicious code in plutology-sass-loader-mongoose-extremophile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5143ce37789b72ee505bcbf926f1c3450ee28736cce04aeca84e1eb9010bbbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac770bddada6d8683dab27aa4b1ff2328daf6bf4f00fd6061392212b35abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187211 Malicious code in graviton-hapi-less-loader-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189866 Malicious code in terser-postcss-loader-bunyan-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8535f78567524d8b9c6926e20120a445a55b1ab1f7a69b7db5f380940c2fd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178804
Malicious code in futurology-taurus-celeste-css-loader npm...
Malicious code in mira-fusion-yildun-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177094
Malicious code in postcss-loader-install-thuban-pipe npm...
EUVD-2025-180331
Malicious code in ariel-backend-css-loader-aldebaran npm...
EUVD-2025-177096
Malicious code in postcss-loader-ganymede-metalsmith-farout npm...
EUVD-2025-178244
Malicious code in juno-saturnology-sass-loader-joviology npm...
EUVD-2025-176878
Malicious code in quantum-computing-less-loader-mensa-css-loader npm...
EUVD-2025-177837
Malicious code in mineralogy-less-loader-dagda-global npm...
EUVD-2025-178978
Malicious code in exoplanet-izar-superposition-style-loader npm...