EUVD-2025-113053

Malicious code in grunt-development-postcss-loader-hydra npm...

Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121122

Malicious code in triton-antares-less-loader-gulp npm...

EUVD-2025-114895

Malicious code in cosmos-postcss-loader-iota-eslint-config npm...

EUVD-2025-121535

Malicious code in supervisor-corvus-css-loader-spinner npm...

EUVD-2025-121127

Malicious code in transport-sass-loader-csv-kaus npm...

EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

EUVD-2025-120488

Malicious code in weywot-less-loader-grunt-gatsby npm...

EUVD-2025-111434

Malicious code in markdown-bunyan-sass-loader-altair npm...

Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122242

Malicious code in sass-loader-npm-markdownlint-apollo npm...

EUVD-2025-115441

Malicious code in changelog-cosmiconfig-sass-loader-commitlint npm...

Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122262

Malicious code in sass-loader-bulma-eleventy-vuepress npm...

EUVD-2025-114230

Malicious code in elara-jovian-fornax-sass-loader npm...

EUVD-2025-122246

Malicious code in sass-loader-mongodb-elara-norma npm...

EUVD-2025-114988

Malicious code in cors-framework-promise-sass-loader npm...

EUVD-2025-124645

Malicious code in nashira-farout-sass-loader-private npm...

Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...