EUVD-2025-114551

Malicious code in deneb-scorpius-style-loader-morgan npm...

EUVD-2025-121580

Malicious code in style-loader-yildun-prompts-electron npm...

EUVD-2025-122534

Malicious code in restart-ophiuchus-mensa-style-loader npm...

MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149205 Malicious code in vuetify-corvus-style-loader-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ac5d8f4ef4da0a521cba19e091fddec521d67a7137b05c43cef813e61cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121590

Malicious code in style-loader-nightwatch-zenith-oberon npm...

EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111141

Malicious code in mini-css-extract-plugin-gatsby-transform-ceres npm...

EUVD-2025-121589

Malicious code in style-loader-node-config-charon-izar npm...

EUVD-2025-116536

Malicious code in arcturus-chakra-ui-css-loader-gemini npm...

EUVD-2025-116550

Malicious code in aquarius-style-loader-start-semantic-ui npm...

EUVD-2025-120241

Malicious code in xenos-style-loader-transport-electron-builder npm...

EUVD-2025-122478

Malicious code in rimraf-auth0-style-loader-xenos npm...

Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...