EUVD-2025-123578

Malicious code in polaris-galaxy-dione-css-loader npm...

EUVD-2025-120842

Malicious code in vega-css-loader-json-mensa npm...

EUVD-2025-122208

Malicious code in scorpius-sass-loader-jekyll-upgrade npm...

EUVD-2025-114086

Malicious code in enceladus-css-loader-nuxtjs-eris npm...

EUVD-2025-113039

Malicious code in grunt-quito-postcss-loader-koa npm...

Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c446fa252e5b33e711346dee067288e0df024c384c7833c1626571573ed3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112257

Malicious code in jasmine-less-loader-schema-wasat npm...

EUVD-2025-111926

Malicious code in kinetic-typeorm-less-loader-markdownlint npm...

EUVD-2025-111232

Malicious code in metalsmith-mui-less-loader-docusaurus npm...

EUVD-2025-124721

Malicious code in mui-cosmos-less-loader-duplex npm...

Malicious code in sirius-sedna-sass-loader-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115453

Malicious code in chalk-run-script-prompts-css-loader npm...

Malicious code in enceladus-css-loader-nuxtjs-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483e9bf65770e7a71f5e4ead851865362008112e6ac859753ed4775f66af56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146402 Malicious code in postcss-loader-nightwatch-hugo-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4beacd28628662157313c1228b2e5d2f837b744c07aa98fb2107f178cad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...