7825 matches found
MAL-2025-142677 Malicious code in framework-css-loader-enceladus-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca66adcb9a358ad5603b9340d100d75f925c654af5e8dca026b61ea51b5db2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146163 Malicious code in phoebe-mongodb-css-loader-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146105 Malicious code in perseus-postcss-loader-thuban-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f8b923d176dbf13f318330091afc5a22441ff682eae8e7d2c7fc2859adbf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122252
Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...
EUVD-2025-123861
Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...
MAL-2025-146008 Malicious code in pavo-registry-sass-loader-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f61238fa21b5f97c0b5d267d86f8ed1bb47f8660f3e7420aeef43de1cf3251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141608 Malicious code in despina-regulus-css-loader-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1aab80e4cce0b81ff5effcff1de0ccec604fd14553e05141f232ef3aa99ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141310 Malicious code in css-loader-phenomic-phoebe-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd1ff25e1d1dab0ec49a40130c27cf086276094946c1578b49eb29788edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146422 Malicious code in postcss-slides-browserify-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed32228acec370c873c86c008e03a58d16a799b4df31c1b515a25cd13ab56bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122242
Malicious code in sass-loader-npm-markdownlint-apollo npm...
MAL-2025-148260 Malicious code in standard-style-loader-flare-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9ab2321a1d8bba1e68a004f01d1aa6a51d88faeedf9b2d448f214e64125d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121594
Malicious code in style-loader-metalsmith-jasmine-eslint-config npm...