Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac770bddada6d8683dab27aa4b1ff2328daf6bf4f00fd6061392212b35abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-command-betelgeuse-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177644

Malicious code in nestjs-css-loader-command-mensa npm...

EUVD-2025-178274

Malicious code in jest-titan-postcss-loader-galaxy npm...

EUVD-2025-179450

Malicious code in csv-mongodb-rehype-less-loader npm...

EUVD-2025-178342

Malicious code in iota-less-loader-commitlint-config-angular-private npm...

EUVD-2025-179465

Malicious code in css-loader-rehype-toml-version npm...

EUVD-2025-177680

Malicious code in nebula-development-less-loader-achernar npm...

EUVD-2025-178127

Malicious code in less-loader-gulp-yaml-crust npm...

EUVD-2025-178077

Malicious code in lint-isostasy-altair-less-loader npm...

EUVD-2025-178184

Malicious code in koa-callback-postcss-loader-webdriver-manager npm...

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177392

Malicious code in package-changelog-css-loader-slidev npm...

EUVD-2025-179961

Malicious code in buffer-css-loader-draco-sirius npm...

EUVD-2025-176204

Malicious code in stop-chalk-build-less-loader npm...

EUVD-2025-179356

Malicious code in delphinus-miranda-postcss-loader-chariklo npm...

EUVD-2025-176613

Malicious code in rocket-package-sass-loader-avior npm...

EUVD-2025-177873

Malicious code in metalsmith-postcss-loader-magellan-test npm...

MAL-2025-188212 Malicious code in neptune-barnard-mdx-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c0e0acd449d91091dc3badd8761736dd2387ceacb715698941f9b53f6e56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...