5969 matches found
EUVD-2025-120975
Malicious code in uninstall-browserify-ganymede-postcss-loader npm...
EUVD-2025-123521
Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...
EUVD-2025-111778
Malicious code in less-loader-toml-private-soap npm...
EUVD-2025-111785
Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...
EUVD-2025-114221
Malicious code in elara-style-loader-comet-async npm...
EUVD-2025-123513
Malicious code in postcss-loader-scorpius-centaurus-farout npm...
EUVD-2025-123937
Malicious code in passport-less-loader-carpo-acamar npm...
EUVD-2025-111545
Malicious code in loopback-weywot-style-loader-gemini npm...
EUVD-2025-115747
Malicious code in canopus-hermes-postcss-loader-xanthus npm...
Malicious code in sass-loader-native-jsonp-callisto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wasat-cli-barnard-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e5dd212b62e122019aa03288e721c9ebc41f26fbc902e00502ce9f915a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116932
Malicious code in acamar-css-loader-style-loader-readable npm...
Malicious code in fork-less-loader-stream-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113349
Malicious code in gacrux-dagda-koa-css-loader npm...
EUVD-2025-111817
Malicious code in leda-style-loader-pyxis-izar npm...
Malicious code in scorpius-sass-loader-jekyll-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9069ae233c85f24ea1a43e58d24f242ee930f7dce85b47136affc3a6ff7321f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112734
Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...
EUVD-2025-114428
Malicious code in docusaurus-websockets-sass-loader-upgrade npm...