EUVD-2025-111789

Malicious code in less-loader-lint-staged-csv-local npm...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-121594

Malicious code in style-loader-metalsmith-jasmine-eslint-config npm...

EUVD-2025-114801

Malicious code in css-loader-metalsmith-reveal-md-zenobia npm...

EUVD-2025-113413

Malicious code in frontend-build-css-loader-europa npm...

EUVD-2025-115592

Malicious code in celeste-nebula-less-loader-build npm...

EUVD-2025-115859

Malicious code in bunyan-less-loader-tethys-playwright npm...

EUVD-2025-121758

Malicious code in spica-magellan-css-loader-eslint npm...

EUVD-2025-123283

Malicious code in promise-galaxy-express-css-loader npm...

EUVD-2025-112385

Malicious code in iota-iota-avior-postcss-loader npm...

EUVD-2025-124538

Malicious code in neptune-stream-toml-postcss-loader npm...

Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120788

Malicious code in version-miranda-eclipse-sass-loader npm...

EUVD-2025-123756

Malicious code in phoebe-nightmare-npm-less-loader npm...

EUVD-2025-124833

Malicious code in mocha-less-loader-axios-npm npm...

EUVD-2025-121324

Malicious code in testcafe-sass-loader-morgan-package npm...

EUVD-2025-123913

Malicious code in pavo-registry-sass-loader-barnard npm...

Malicious code in titan-less-loader-mongoose-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f435d0c6225ef989e040df7f6dc37a6312c0b5c425590180a80e65fa144b165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-less-loader-tethys-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbc3a3cc8e63e76f314b7ddd68857182ffde9e092dd347c91d634fdb95c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...