EUVD-2025-112585

Malicious code in ignite-sqlite-celeste-sass-loader npm...

MAL-2025-149205 Malicious code in vuetify-corvus-style-loader-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ac5d8f4ef4da0a521cba19e091fddec521d67a7137b05c43cef813e61cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147388 Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121107

Malicious code in triton-pegasus-less-loader-antares npm...

EUVD-2025-124015

Malicious code in orbit-europa-dorado-postcss-loader npm...

Malicious code in bunyan-less-loader-tethys-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbc3a3cc8e63e76f314b7ddd68857182ffde9e092dd347c91d634fdb95c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111794

Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd npm...

Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-cli-barnard-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e5dd212b62e122019aa03288e721c9ebc41f26fbc902e00502ce9f915a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-bulma-eleventy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123515

Malicious code in postcss-loader-quito-iota-commitizen npm...

EUVD-2025-116275

Malicious code in axios-electron-builder-module-css-loader npm...

Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112114

Malicious code in jsonp-jwt-avior-postcss-loader npm...

EUVD-2025-123255

Malicious code in prompts-less-loader-child-process-sedna npm...

EUVD-2025-123499

Malicious code in postcss-slides-browserify-less-loader npm...

EUVD-2025-115973

Malicious code in browserify-less-loader-tethys-style-loader npm...

EUVD-2025-123937

Malicious code in passport-less-loader-carpo-acamar npm...

EUVD-2025-114634

Malicious code in dagda-less-loader-public-upgrade npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...