7785 matches found
MAL-2025-187755 Malicious code in less-loader-gulp-yaml-crust (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188783 Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187487 Malicious code in inquirer-flare-sass-loader-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9ac73491da4c0bbc3063c9fee7d300beb6e658c1d0164abc26edafd86238d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188781 Malicious code in postcss-loader-install-thuban-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778749957419a4be0f2a22c512b8fe2d8c4492150fa5d08d04f64eadb7e70703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178123
Malicious code in less-loader-sedna-blaze-commitizen npm...
EUVD-2025-177092
Malicious code in postcss-loader-prosthetics-loopback-javascript npm...
Malicious code in sass-loader-fornax-passport-geoarchaeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfd62a356a0fe396589416121a7f7bc96b02b42ac69778ec8d6e9d3ba645016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quantum-computing-less-loader-mensa-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefb4c011996c06f58eda7e1840993e823cf3eddca4bdc92a366643fbc9da57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178426
Malicious code in indus-coronalmassejection-sass-loader-virgo npm...
Malicious code in less-loader-grus-void-biosignature (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176416
Malicious code in server-callback-css-loader-archaeoastronomy npm...
Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yonder-less-loader-ini-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in less-loader-gulp-yaml-crust (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177956
Malicious code in markdown-less-loader-joviology-fetch npm...
Malicious code in quark-eslint-config-materialize-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177670
Malicious code in neptune-barnard-mdx-less-loader npm...