EUVD-2025-115507

Malicious code in chai-postcss-loader-subscription-epimetheus npm...

EUVD-2025-124385

Malicious code in node-sass-eleventy-framework-postcss-loader npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-115453

Malicious code in chalk-run-script-prompts-css-loader npm...

EUVD-2025-111793

Malicious code in less-loader-element-ui-telesto-uninstall npm...

EUVD-2025-111797

Malicious code in less-loader-cosmiconfig-prompts-ganymede npm...

EUVD-2025-111795

Malicious code in less-loader-despina-helios-websockets npm...

Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111628

Malicious code in local-galaxy-css-loader-chariklo npm...

Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121592

Malicious code in style-loader-mocha-hermes-selenium npm...

MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121611

Malicious code in stream-dynamo-sass-loader-google npm...

EUVD-2025-122208

Malicious code in scorpius-sass-loader-jekyll-upgrade npm...

EUVD-2025-111471

Malicious code in magellan-less-loader-proxima-commitlint npm...

EUVD-2025-115173

Malicious code in commitizen-less-loader-mysql-html-webpack-plugin npm...

MAL-2025-142758 Malicious code in gacrux-css-loader-puppeteer-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ffaafe4f44d319ebfb460879e4201884b8b653ca7ccaa102f814685839875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122916

Malicious code in quito-superagent-juno-css-loader npm...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...