8126 matches found
Malicious code in testcafe-sass-loader-morgan-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114604
Malicious code in deimos-sass-loader-quark-dotenv npm...
EUVD-2025-120842
Malicious code in vega-css-loader-json-mensa npm...
EUVD-2025-116343
Malicious code in auth0-style-loader-polaris-gridsome npm...
EUVD-2025-122854
Malicious code in react-bootstrap-native-rehype-style-loader npm...
EUVD-2025-111471
Malicious code in magellan-less-loader-proxima-commitlint npm...
EUVD-2025-123104
Malicious code in publish-taurus-css-loader-mensa npm...
EUVD-2025-111226
Malicious code in metalsmith-sagitta-less-loader-xanadu npm...
Malicious code in non-blocking-style-loader-grus-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6981d21e3d65c60637859fde1c38681db6c5965ee98576c668ade20b35449bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111783
Malicious code in less-loader-sirius-perseus-loglevel npm...
Malicious code in local-galaxy-css-loader-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147530 Malicious code in rollup-postcss-loader-xanadu-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f558dd12ed39569dd372e118be9afd8a3636ac8fdaff883749c0113325e68b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111545
Malicious code in loopback-weywot-style-loader-gemini npm...
EUVD-2025-123742
Malicious code in phoebe-sass-loader-async-europa npm...
EUVD-2025-114804
Malicious code in css-loader-hapi-webpack-library npm...
EUVD-2025-114076
Malicious code in enceladus-quito-global-style-loader npm...
Malicious code in taurus-module-style-loader-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146432 Malicious code in postgres-geckodriver-less-loader-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...