EUVD-2025-115872

Malicious code in bulma-uninstall-loopback-sass-loader npm...

Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122722

Malicious code in relay-iota-sass-loader-enceladus npm...

EUVD-2025-122251

Malicious code in sass-loader-jovian-axios-framework npm...

EUVD-2025-114339

Malicious code in dotenv-safe-postcss-loader-taurus-webpack npm...

Malicious code in ultra-sass-loader-pegasus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582c937e56d01f391201e9c3ab543d08c5f1fefed78d980ff35171b20714de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123513

Malicious code in postcss-loader-scorpius-centaurus-farout npm...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-transport-fusion-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111858

Malicious code in leda-acamar-sequelize-sass-loader npm...

EUVD-2025-122253

Malicious code in sass-loader-gravity-draco-miranda npm...

EUVD-2025-114086

Malicious code in enceladus-css-loader-nuxtjs-eris npm...

EUVD-2025-111870

Malicious code in lacerta-hyperion-cors-sass-loader npm...

EUVD-2025-122687

Malicious code in release-it-sass-loader-parcel-fork npm...

EUVD-2025-122064

Malicious code in semantic-ui-version-cordelia-sass-loader npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122130

Malicious code in sedna-sequelize-less-loader-rollup-plugin npm...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...