MAL-2025-147388 Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145710 Malicious code in nuxtjs-polaris-google-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a059d4f6f8befc217803d2bc110b92360c80662b5242c31399896692d4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139552 Malicious code in aquarius-style-loader-start-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbade8880dc67ab4b3c30a53231a5674f8423bf4e4f1675abf948cf7db1e08bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116536

Malicious code in arcturus-chakra-ui-css-loader-gemini npm...

EUVD-2025-121585

Malicious code in style-loader-rollup-plugin-izar-phoebe npm...

EUVD-2025-121587

Malicious code in style-loader-repository-command-auriga npm...

EUVD-2025-111579

Malicious code in loop-style-loader-webpack-promise npm...

EUVD-2025-111139

Malicious code in mini-css-extract-plugin-heka-miranda-dotenv npm...

EUVD-2025-122162

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint npm...

MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123190

Malicious code in proxima-proxima-relay-style-loader npm...

EUVD-2025-114727

Malicious code in cygnus-style-loader-sqlite-solis npm...

StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak

Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...

Malicious code in rina-peyek96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa40866ce59a1c450ae4cd293804269fe7598cdc9eb4742969cc46e3efc68ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-miebogor53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbbb051f424f4dcff4c4bf77cdce46b3f2de93562cc6a0551cd4a0be09c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199d3300f5957611c774a013976d215b13e48a506f878ec6402f146ff57a4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jus80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69c975b1f8f1cec28bd0f790997b54f4d7b3a3e8d9ba91ecca190fdb0ad2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-menjes36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170dc74cb83f33d2026f32b5aadf89d534c9aec6d906acead42f6f4337334534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84910 Malicious code in eka-rawon95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e6a178087007fab0134ac85abfa47e455fce955b62b076ce8e117228cbae5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...