EUVD-2025-177094

Malicious code in postcss-loader-install-thuban-pipe npm...

EUVD-2025-177097

Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv npm...

EUVD-2025-177095

Malicious code in postcss-loader-hapi-publish-event npm...

Malicious code in csv-mongodb-rehype-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f821738c4cf7c99d8107896b24f9a81bd00506c105a6aca07ef8a729d5d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178126

Malicious code in less-loader-orbit-outercore-graphql npm...

EUVD-2025-177241

Malicious code in perturbation-css-loader-loopback-uninstall npm...

EUVD-2025-180182

Malicious code in await-supercluster-prosthetics-postcss-loader npm...

EUVD-2025-176921

Malicious code in publish-postcss-loader-achernar-hermes npm...

EUVD-2025-178671

Malicious code in graviton-hapi-less-loader-electron npm...

EUVD-2025-177093

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy npm...

EUVD-2025-180283

Malicious code in astrometry-postcss-loader-mineralogy-uninstall npm...

Malicious code in ariel-backend-css-loader-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8985f6f4b26a752bfd23a32fbbf39c2aab5c6b48f599eb0f46f6398a6833b115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c4ee8a47b6f72647c164486538c1d1765edb3e08b84f85ff8f0e12991b0634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178041

Malicious code in local-terser-postcss-loader-eventhoriz npm...

EUVD-2025-177956

Malicious code in markdown-less-loader-joviology-fetch npm...

EUVD-2025-176814

Malicious code in radioastronomy-augmentedreality-library-style-loader npm...

MAL-2025-188058 Malicious code in mira-fusion-yildun-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188779 Malicious code in postcss-loader-ganymede-metalsmith-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d3d14c13f394da725b8d17c124c9aa3305c6a8dff021d59ab3c8fcc8fb610c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...