EUVD-2025-122391

Malicious code in rollup-proxima-norma-less-loader npm...

EUVD-2025-120144

Malicious code in yaml-eslint-eslint-style-loader npm...

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

EUVD-2025-122363

Malicious code in sadr-css-loader-kaus-leda npm...

EUVD-2025-121127

Malicious code in transport-sass-loader-csv-kaus npm...

EUVD-2025-120701

Malicious code in vulcan-css-loader-command-nconf npm...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113467

Malicious code in fornax-postcss-loader-umbra-webdriver-manager npm...

EUVD-2025-113875

Malicious code in eslint-plugin-perseus-css-loader-eclipse npm...

EUVD-2025-121587

Malicious code in style-loader-repository-command-auriga npm...

EUVD-2025-116187

Malicious code in barnard-nova-sass-loader-configstore npm...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...

MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146414 Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...