EUVD-2025-111979

Malicious code in kastra-style-loader-scorpius-mui npm...

EUVD-2025-114804

Malicious code in css-loader-hapi-webpack-library npm...

EUVD-2025-122260

Malicious code in sass-loader-cassini-socketio-wasat npm...

EUVD-2025-121324

Malicious code in testcafe-sass-loader-morgan-package npm...

EUVD-2025-113021

Malicious code in grus-css-loader-ophiuchus-scripts npm...

Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124211

Malicious code in nuxtjs-polaris-google-style-loader npm...

EUVD-2025-121889

Malicious code in soap-style-loader-eris-rate-limiter npm...

EUVD-2025-116514

Malicious code in ariel-ganymede-octans-postcss-loader npm...

EUVD-2025-123921

Malicious code in pavo-less-loader-convict-uglify-js npm...

EUVD-2025-123746

Malicious code in phoebe-rehype-style-loader-nightwatch npm...

EUVD-2025-123527

Malicious code in postcss-loader-europa-webdriver-mocha-arcturus npm...

EUVD-2025-113529

Malicious code in fork-css-loader-halley-markdown-pdf npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

EUVD-2025-114230

Malicious code in elara-jovian-fornax-sass-loader npm...

EUVD-2025-114131

Malicious code in element-ui-prettier-css-loader-elara npm...

Malicious code in postcss-loader-style-loader-foundation-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7af3a5be712e0cae8587eeca54d8551aab41011790b2cadb628fd9c4e66952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113812

Malicious code in europa-vuepress-sass-loader-graphql npm...

Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...