EUVD-2025-122257

Malicious code in sass-loader-corvus-kastra-jest npm...

EUVD-2025-115507

Malicious code in chai-postcss-loader-subscription-epimetheus npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-115453

Malicious code in chalk-run-script-prompts-css-loader npm...

EUVD-2025-111793

Malicious code in less-loader-element-ui-telesto-uninstall npm...

EUVD-2025-111795

Malicious code in less-loader-despina-helios-websockets npm...

Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111628

Malicious code in local-galaxy-css-loader-chariklo npm...

EUVD-2025-121592

Malicious code in style-loader-mocha-hermes-selenium npm...

EUVD-2025-121611

Malicious code in stream-dynamo-sass-loader-google npm...

EUVD-2025-122208

Malicious code in scorpius-sass-loader-jekyll-upgrade npm...

EUVD-2025-115173

Malicious code in commitizen-less-loader-mysql-html-webpack-plugin npm...

EUVD-2025-122916

Malicious code in quito-superagent-juno-css-loader npm...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-sass-loader-markdown-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122345

Malicious code in sadr-scripts-css-loader-version npm...

Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114634

Malicious code in dagda-less-loader-public-upgrade npm...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...