8105 matches found
MAL-2025-139552 Malicious code in aquarius-style-loader-start-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbade8880dc67ab4b3c30a53231a5674f8423bf4e4f1675abf948cf7db1e08bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146008 Malicious code in pavo-registry-sass-loader-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f61238fa21b5f97c0b5d267d86f8ed1bb47f8660f3e7420aeef43de1cf3251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123190
Malicious code in proxima-proxima-relay-style-loader npm...
Malicious code in nashira-farout-sass-loader-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140213 Malicious code in bulma-gatsby-gravity-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff803168b2fe3f1d2344f342c7f9d5a4fe781a3468e065bc15a5a06b0aeafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in testcafe-sass-loader-morgan-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114604
Malicious code in deimos-sass-loader-quark-dotenv npm...
EUVD-2025-120842
Malicious code in vega-css-loader-json-mensa npm...
EUVD-2025-116343
Malicious code in auth0-style-loader-polaris-gridsome npm...
EUVD-2025-122854
Malicious code in react-bootstrap-native-rehype-style-loader npm...
MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111471
Malicious code in magellan-less-loader-proxima-commitlint npm...
EUVD-2025-123104
Malicious code in publish-taurus-css-loader-mensa npm...
EUVD-2025-111226
Malicious code in metalsmith-sagitta-less-loader-xanadu npm...
Malicious code in non-blocking-style-loader-grus-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6981d21e3d65c60637859fde1c38681db6c5965ee98576c668ade20b35449bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111783
Malicious code in less-loader-sirius-perseus-loglevel npm...
Malicious code in local-galaxy-css-loader-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147530 Malicious code in rollup-postcss-loader-xanadu-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f558dd12ed39569dd372e118be9afd8a3636ac8fdaff883749c0113325e68b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...