MAL-2025-24091 Malicious code in juno-package-ursa-less-loader (npm)

The package juno-package-ursa-less-loader was found to contain malicious code...

MAL-2025-34120 Malicious code in style-loader-server-epimetheus-dotenv-safe (npm)

The package style-loader-server-epimetheus-dotenv-safe was found to contain malicious code...

MAL-2025-17791 Malicious code in css-loader-google-jabbah-orbit (npm)

The package css-loader-google-jabbah-orbit was found to contain malicious code...

MAL-2025-32836 Malicious code in scripts-quantum-postcss-loader-umbriel (npm)

The package scripts-quantum-postcss-loader-umbriel was found to contain malicious code...

MAL-2025-33586 Malicious code in sociobiology-exoplanetology-less-loader-sagitta (npm)

The package sociobiology-exoplanetology-less-loader-sagitta was found to contain malicious code...

MAL-2025-34648 Malicious code in tectonophysics-bellatrix-sass-loader-biohacking (npm)

The package tectonophysics-bellatrix-sass-loader-biohacking was found to contain malicious code...

MAL-2025-31280 Malicious code in query-hydra-postcss-loader-config (npm)

The package query-hydra-postcss-loader-config was found to contain malicious code...

Malicious code in cassini-ursa-sass-loader-stream (npm)

The package cassini-ursa-sass-loader-stream was found to contain malicious code...

MAL-2025-25177 Malicious code in less-loader-nightmare-dendrochronology-chromedriver (npm)

The package less-loader-nightmare-dendrochronology-chromedriver was found to contain malicious code...

MAL-2025-40129 Malicious code in yakutsk-protractor-vuetify-less-loader (npm)

The package yakutsk-protractor-vuetify-less-loader was found to contain malicious code...

MAL-2025-29141 Malicious code in phoebe-postcss-style-loader-geomorphology (npm)

The package phoebe-postcss-style-loader-geomorphology was found to contain malicious code...

Malicious code in module-speleology-style-loader-singularitarianism (npm)

The package module-speleology-style-loader-singularitarianism was found to contain malicious code...

MAL-2025-17794 Malicious code in css-loader-spinner-proxima-cassini (npm)

The package css-loader-spinner-proxima-cassini was found to contain malicious code...

Malicious code in css-loader-spinner-proxima-cassini (npm)

The package css-loader-spinner-proxima-cassini was found to contain malicious code...

Malicious code in meteor-fomalhaut-izar-sass-loader (npm)

The package meteor-fomalhaut-izar-sass-loader was found to contain malicious code...

Malicious code in slate-liquid-asset-loader (npm)

The package slate-liquid-asset-loader was found to contain malicious code...

MAL-2025-38511 Malicious code in vite-plugin-image-loader (npm)

The package vite-plugin-image-loader was found to contain malicious code...

MAL-2025-17375 Malicious code in com.unity.xrtools.module-loader (npm)

The package com.unity.xrtools.module-loader was found to contain malicious code...

MAL-2025-34119 Malicious code in style-loader-nextjs-css-loader-gemini (npm)

The package style-loader-nextjs-css-loader-gemini was found to contain malicious code...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...