Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113473

Malicious code in fornax-mongodb-ini-sass-loader npm...

EUVD-2025-121408

Malicious code in terser-flare-css-loader-pipe npm...

EUVD-2025-116554

Malicious code in aquarius-sass-loader-morgan-unuk npm...

EUVD-2025-123741

Malicious code in phoebe-sass-loader-luna-reveal-md npm...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

EUVD-2025-120646

Malicious code in wasat-cli-barnard-style-loader npm...

EUVD-2025-113974

Malicious code in equinox-spectron-less-loader-meteor npm...

Malicious code in sass-loader-jovian-axios-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123913

Malicious code in pavo-registry-sass-loader-barnard npm...

EUVD-2025-122247

Malicious code in sass-loader-meissa-pino-pretty-zenobia npm...

EUVD-2025-122242

Malicious code in sass-loader-npm-markdownlint-apollo npm...

EUVD-2025-123742

Malicious code in phoebe-sass-loader-async-europa npm...

EUVD-2025-120226

Malicious code in xerxes-foundation-postcss-loader-aquarius npm...

EUVD-2025-112074

Malicious code in juno-style-loader-sedna-janus npm...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122249

Malicious code in sass-loader-leda-spica-antares npm...

EUVD-2025-115579

Malicious code in centauri-element-ui-stream-sass-loader npm...

EUVD-2025-116753

Malicious code in altair-css-loader-fornax-nightmare npm...

Malicious code in slidev-postcss-loader-non-blocking-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908ac57851e5eb2a493ddb3438f9e04e69b5b2d95cb824b69490b1cbee3ddba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...