MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123828

Malicious code in perseus-less-loader-arcturus-telesto npm...

EUVD-2025-123507

Malicious code in postcss-loader-winston-transport-spinner npm...

EUVD-2025-121940

Malicious code in slides-geckodriver-sass-loader-webpack npm...

EUVD-2025-111776

Malicious code in less-loader-virgo-phenomic-typeorm npm...

EUVD-2025-111778

Malicious code in less-loader-toml-private-soap npm...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148520 Malicious code in terser-flare-css-loader-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691bda64b8884a4f1061ba8baa4801188477d843430b4571326d701603b5b08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121535

Malicious code in supervisor-corvus-css-loader-spinner npm...

EUVD-2025-121581

Malicious code in style-loader-wolf-elara-nconf npm...

Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112581

Malicious code in ignite-test-less-loader-kaus npm...

EUVD-2025-123827

Malicious code in perseus-less-loader-uninstall-enceladus npm...

EUVD-2025-121880

Malicious code in socketio-auriga-native-less-loader npm...

EUVD-2025-122244

Malicious code in sass-loader-native-jsonp-callisto npm...

MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114626

Malicious code in dagda-repository-postcss-loader-wolf npm...

EUVD-2025-112124

Malicious code in jsonp-blitz-cordelia-less-loader npm...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...