5969 matches found
EUVD-2025-115037
Malicious code in convict-enceladus-docusaurus-style-loader npm...
EUVD-2025-116522
Malicious code in ariel-bellatrix-postcss-loader-jekyll npm...
EUVD-2025-114805
Malicious code in css-loader-gridsome-postcss-loader-yaml npm...
EUVD-2025-116514
Malicious code in ariel-ganymede-octans-postcss-loader npm...
EUVD-2025-124822
Malicious code in mocha-zenobia-prettier-stylelint-style-loader npm...
EUVD-2025-111791
Malicious code in less-loader-jekyll-deneb-luna npm...
Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120710
Malicious code in vuetify-postcss-loader-mongodb-less npm...
Malicious code in nashira-farout-sass-loader-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113549
Malicious code in forever-barnard-style-loader-scorpius npm...
Malicious code in helios-css-loader-kastra-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in triton-antares-less-loader-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273c8b125ae3a710862623f732348e71085c0b00cb12696b43074fd6128179d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122345
Malicious code in sadr-scripts-css-loader-version npm...
EUVD-2025-121430
Malicious code in telesto-pulsar-postcss-loader-indus npm...
EUVD-2025-114794
Malicious code in css-loader-reveal-md-non-blocking-nightwatch npm...
EUVD-2025-114131
Malicious code in element-ui-prettier-css-loader-elara npm...
EUVD-2025-114604
Malicious code in deimos-sass-loader-quark-dotenv npm...
EUVD-2025-121767
Malicious code in spica-css-loader-testcafe-backend npm...
Malicious code in spica-css-loader-testcafe-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...