5974 matches found
Malicious code in spica-css-loader-testcafe-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120224
Malicious code in xerxes-gridsome-postcss-loader-google npm...
EUVD-2025-123742
Malicious code in phoebe-sass-loader-async-europa npm...
EUVD-2025-114603
Malicious code in deimos-sass-loader-ursa-ini npm...
EUVD-2025-115173
Malicious code in commitizen-less-loader-mysql-html-webpack-plugin npm...
EUVD-2025-121472
Malicious code in tailwindcss-style-loader-corvus-mensa npm...
EUVD-2025-124296
Malicious code in non-blocking-style-loader-grus-slidev npm...
EUVD-2025-114200
Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...
EUVD-2025-116128
Malicious code in betelgeuse-css-loader-luna-dactyl npm...
EUVD-2025-112388
Malicious code in iota-fomalhaut-less-loader-repository npm...
Malicious code in postcss-loader-commitizen-foundation-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113945
Malicious code in eris-chakra-ui-sass-loader-fornax npm...
EUVD-2025-122239
Malicious code in sass-loader-rate-limiter-aurora-playwright npm...
EUVD-2025-116330
Malicious code in avior-kaus-sass-loader-pegasus npm...
EUVD-2025-116885
Malicious code in adonis-sass-loader-eslint-config-convict npm...
Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113812
Malicious code in europa-vuepress-sass-loader-graphql npm...
Malicious code in gemini-arcturus-ursa-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...