EUVD-2025-121584

Malicious code in style-loader-sass-loader-public-hermes npm...

EUVD-2025-113221

Malicious code in gemini-arcturus-ursa-sass-loader npm...

EUVD-2025-122249

Malicious code in sass-loader-leda-spica-antares npm...

EUVD-2025-121155

Malicious code in transform-sass-loader-polaris-relay npm...

EUVD-2025-122247

Malicious code in sass-loader-meissa-pino-pretty-zenobia npm...

EUVD-2025-116525

Malicious code in arcturus-toml-carpo-postcss-loader npm...

Malicious code in postcss-loader-webdriver-manager-chalk-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a4091768432e806b132a6147bd0d7b9388cffec761aaf5c90f18b1fb1576a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-quito-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff2bf6dc026adfb7fcf087d65584c298b75dd1842c5baff878381350cd0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122009

Malicious code in shelljs-heka-sass-loader-gemini npm...

EUVD-2025-123506

Malicious code in postcss-loader-yakutsk-europa-orbit npm...

EUVD-2025-124280

Malicious code in norma-fusion-corvus-postcss-loader npm...

EUVD-2025-121372

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader npm...

EUVD-2025-123514

Malicious code in postcss-loader-sagitta-dynamo-altair npm...

EUVD-2025-114339

Malicious code in dotenv-safe-postcss-loader-taurus-webpack npm...

EUVD-2025-112888

Malicious code in helios-achernar-postcss-loader-cypress npm...

EUVD-2025-115579

Malicious code in centauri-element-ui-stream-sass-loader npm...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

Malicious code in sass-loader-bulma-eleventy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114239

Malicious code in elara-css-loader-tool-yonder npm...

Malicious code in callback-package-tethys-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174b66dbf76fb664cc59ea69deef78d6bf12640a1916ef82cfda94247d890896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...