EUVD-2025-123387

Malicious code in private-node-config-less-loader-parcel npm...

Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115498

Malicious code in chakra-ui-comet-style-loader-markdown npm...

EUVD-2025-122844

Malicious code in readable-element-ui-browserify-style-loader npm...

Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

EUVD-2025-120394

Malicious code in winston-yildun-less-loader-dactyl npm...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113576

Malicious code in fomalhaut-bulma-markdown-less-loader npm...

EUVD-2025-111783

Malicious code in less-loader-sirius-perseus-loglevel npm...

EUVD-2025-123190

Malicious code in proxima-proxima-relay-style-loader npm...

Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122258

Malicious code in sass-loader-cors-forever-firebase npm...

EUVD-2025-115534

Malicious code in ceres-oberon-less-loader-proxima npm...

EUVD-2025-123827

Malicious code in perseus-less-loader-uninstall-enceladus npm...

EUVD-2025-124738

Malicious code in morgan-less-loader-fusion-transport npm...

EUVD-2025-122167

Malicious code in sedna-carpo-command-postcss-loader npm...

EUVD-2025-121592

Malicious code in style-loader-mocha-hermes-selenium npm...

EUVD-2025-124782

Malicious code in mongodb-postcss-loader-async-scorpius npm...

Malicious code in corvus-tethys-elektra-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00414bc558ede2504999ccd82b0749bf8e7114569a2c2e502313eae1f9ec0a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...