MAL-2025-38218 Malicious code in venus-postcss-loader-halley-tardigrade (npm)

The package venus-postcss-loader-halley-tardigrade was found to contain malicious code...

MAL-2025-20055 Malicious code in exoplanetology-postcss-loader-local-quantum-computing (npm)

The package exoplanetology-postcss-loader-local-quantum-computing was found to contain malicious code...

MAL-2025-34648 Malicious code in tectonophysics-bellatrix-sass-loader-biohacking (npm)

The package tectonophysics-bellatrix-sass-loader-biohacking was found to contain malicious code...

MAL-2025-38451 Malicious code in virgo-jwt-style-loader-titan (npm)

The package virgo-jwt-style-loader-titan was found to contain malicious code...

Malicious code in cedrus-example-loader (npm)

The package cedrus-example-loader was found to contain malicious code...

Malicious code in yaml-perseus-gridsome-style-loader (npm)

The package yaml-perseus-gridsome-style-loader was found to contain malicious code...

Malicious code in css-loader-quito-soap-ursa (npm)

The package css-loader-quito-soap-ursa was found to contain malicious code...

Malicious code in changelog-fermion-less-loader-virgo (npm)

The package changelog-fermion-less-loader-virgo was found to contain malicious code...

Malicious code in smartserve-loader (npm)

The package smartserve-loader was found to contain malicious code...

@goodboydigital/fido-build (>=3.0.0 <=13.2.0), @olympeio-extensions/sustain (>=2.11.5 <=2.14.0) +15 more potentially affected by unknown CVE via bable-loader (=0.0.1-security)

bable-loader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1...

Malicious code in pipe-css-loader-unuk-ursa (npm)

The package pipe-css-loader-unuk-ursa was found to contain malicious code...

Malicious code in ev-scroll-loader (npm)

The package ev-scroll-loader was found to contain malicious code...

Malicious code in cs-config-loader (npm)

The package cs-config-loader was found to contain malicious code...

Malicious code in style-loader-server-epimetheus-dotenv-safe (npm)

The package style-loader-server-epimetheus-dotenv-safe was found to contain malicious code...

Malicious code in css-loader-spinner-proxima-cassini (npm)

The package css-loader-spinner-proxima-cassini was found to contain malicious code...

Malicious code in carina-google-radiant-less-loader (npm)

The package carina-google-radiant-less-loader was found to contain malicious code...

Malicious code in gacrux-sedna-release-it-css-loader (npm)

The package gacrux-sedna-release-it-css-loader was found to contain malicious code...

Malicious code in iota-style-loader-lepton-cygnus (npm)

The package iota-style-loader-lepton-cygnus was found to contain malicious code...

Malicious code in sagitta-mongoose-gravitationalwave-postcss-loader (npm)

The package sagitta-mongoose-gravitationalwave-postcss-loader was found to contain malicious code...

Malicious code in stream-weywot-postcss-loader-version (npm)

The package stream-weywot-postcss-loader-version was found to contain malicious code...