EUVD-2025-111782

Malicious code in less-loader-sqlite-cressida-leda npm...

EUVD-2025-115507

Malicious code in chai-postcss-loader-subscription-epimetheus npm...

EUVD-2025-121587

Malicious code in style-loader-repository-command-auriga npm...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120724

Malicious code in vuetify-corvus-style-loader-dagda npm...

EUVD-2025-111402

Malicious code in markdown-polaris-vega-sass-loader npm...

Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-sagitta-dynamo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124629

Malicious code in native-eslint-plugin-style-loader-got npm...

EUVD-2025-114808

Malicious code in css-loader-dione-barnard-slidev npm...

EUVD-2025-124899

Malicious code in miranda-ariel-metalsmith-css-loader npm...

EUVD-2025-121446

Malicious code in taurus-uninstall-commitizen-postcss-loader npm...

EUVD-2025-114802

Malicious code in css-loader-metalsmith-rest-tailwindcss npm...

EUVD-2025-123489

Malicious code in postgres-geckodriver-less-loader-quark npm...

Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120144

Malicious code in yaml-eslint-eslint-style-loader npm...

Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124460

Malicious code in nightwatch-css-loader-charon-gemini npm...

EUVD-2025-122254

Malicious code in sass-loader-gatsby-chariklo-postcss-loader npm...

Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...