7823 matches found
Malicious code in rimraf-auth0-style-loader-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63113711f441b7dfc1f3e59d618a2408c9b5ac7a3aa57122ecdcb81c93c39353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124596
Malicious code in nconf-postcss-loader-gatsby-electron npm...
MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112126
Malicious code in json-ursa-css-loader-dotenv npm...
MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121718
Malicious code in spinner-postcss-loader-yakutsk-venus npm...
EUVD-2025-120960
Malicious code in uninstall-sass-loader-pegasus-weywot npm...
EUVD-2025-113911
Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...
MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146405 Malicious code in postcss-loader-pegasus-registry-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123817
Malicious code in perseus-postcss-loader-janus-gacrux npm...
MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146407 Malicious code in postcss-loader-sagitta-dynamo-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113435
Malicious code in framework-css-loader-enceladus-chai npm...
EUVD-2025-114467
Malicious code in dione-aurora-less-loader-pegasus npm...
MAL-2025-146413 Malicious code in postcss-loader-webdriver-manager-chalk-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a4091768432e806b132a6147bd0d7b9388cffec761aaf5c90f18b1fb1576a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...