EUVD-2025-122833

Malicious code in readable-pino-pretty-style-loader-jekyll npm...

EUVD-2025-122854

Malicious code in react-bootstrap-native-rehype-style-loader npm...

EUVD-2025-121592

Malicious code in style-loader-mocha-hermes-selenium npm...

EUVD-2025-121591

Malicious code in style-loader-neptune-taurus-gatsby npm...

EUVD-2025-121582

Malicious code in style-loader-start-cressida-passport npm...

EUVD-2025-113784

Malicious code in event-style-loader-quasar-materialize npm...

EUVD-2025-122478

Malicious code in rimraf-auth0-style-loader-xenos npm...

MAL-2025-148344 Malicious code in style-loader-wolf-elara-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797680a710ec1984e98fab2b185ba656f47c264af598ba861fce43bd6dd7b5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148340 Malicious code in style-loader-rollup-plugin-izar-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a0e6674e333da99262c9589dc038cd6e957c309248b12349a0364661a27f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak

Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...

Malicious code in rina-peyek96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa40866ce59a1c450ae4cd293804269fe7598cdc9eb4742969cc46e3efc68ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-miebogor53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbbb051f424f4dcff4c4bf77cdce46b3f2de93562cc6a0551cd4a0be09c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199d3300f5957611c774a013976d215b13e48a506f878ec6402f146ff57a4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jus80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69c975b1f8f1cec28bd0f790997b54f4d7b3a3e8d9ba91ecca190fdb0ad2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84910 Malicious code in eka-rawon95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e6a178087007fab0134ac85abfa47e455fce955b62b076ce8e117228cbae5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-menjes36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170dc74cb83f33d2026f32b5aadf89d534c9aec6d906acead42f6f4337334534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68308 Malicious code in feminist-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac13ed9adccc10d3dc9a5581cd5adb71380525342b0cb47f351a22997ef8d335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501057b254c277a0d05cc3a19fcdf2ddcb3132fb54134272e38814159ff0f2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...