EUVD-2025-121475

Malicious code in tailwindcss-sass-loader-markdown-odin npm...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...

MAL-2025-145217 Malicious code in mutation-bunyan-materialize-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafd16f59961d7f0089c5ad1a6a43e4deb50395ede6d4038ed260d6143ff3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147756 Malicious code in sedna-carpo-command-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a24b4b00f49c87b40537793e078710621ed57e859a9a24b4c06e73f4a01690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141305 Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146766 Malicious code in public-postcss-loader-nconf-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8486c705b8b7152ab39cebfac6f20436a00b56f90d0140031aca814832186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146402 Malicious code in postcss-loader-nightwatch-hugo-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4beacd28628662157313c1228b2e5d2f837b744c07aa98fb2107f178cad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147633 Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142911 Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147841 Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147530 Malicious code in rollup-postcss-loader-xanadu-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f558dd12ed39569dd372e118be9afd8a3636ac8fdaff883749c0113325e68b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146869 Malicious code in puppeteer-xenon-style-loader-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b56d70ad52ccda6fd5988d383f8a86e3e219253eb55ac0bbc9f6a1c69a368d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147984 Malicious code in slides-css-loader-callisto-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e15db063ad96961c26caa1aa5ee053211e5e9c88abed26b2e9f9f82a5714bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146104 Malicious code in perseus-postcss-loader-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717f2f2ac452204d81ca2f4247e7b08e40a0486176508635e3a9a8711d883ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146401 Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...