EUVD-2025-175730

Malicious code in version-sass-loader-webpack-quantum-computing npm...

EUVD-2025-178853

Malicious code in fornax-chariklo-sass-loader-parsec npm...

Malicious code in sass-loader-prompts-inquirer-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510e31e6aebe1ba6798f088e0772983d71667602f005659f7f54fddb9b9facd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178771

Malicious code in ganymede-sass-loader-dagda-husky npm...

EUVD-2025-176522

Malicious code in sass-loader-cluster-link-jekyll npm...

EUVD-2025-177753

Malicious code in morgan-sass-loader-release-it-quark npm...

MAL-2025-188329 Malicious code in nodejs-sass-loader-carina-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ff8f4ea5bf2c844ec1c897f02f47338bcfb40fdbe2cf01b0b824f0c1c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189177 Malicious code in remark-io-sass-loader-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177831

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...

EUVD-2025-177663

Malicious code in neptune-grus-fusion-sass-loader npm...

EUVD-2025-175436

Malicious code in yonder-sass-loader-firebase-cosmicsilence npm...

EUVD-2025-176520

Malicious code in sass-loader-iota-lyra-fomalhaut npm...

EUVD-2025-176524

Malicious code in sass-loader-canopus-mesosphere-concurrently npm...

Malicious code in jovian-sass-loader-native-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225deea9531693f6cbd7d6edd3656452b2959b26fd0b8a748ec2e08d0dbcbb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-fornax-passport-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfd62a356a0fe396589416121a7f7bc96b02b42ac69778ec8d6e9d3ba645016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178268

Malicious code in jovian-sass-loader-native-cassini npm...

EUVD-2025-176519

Malicious code in sass-loader-lepton-nebula-virgo npm...

EUVD-2025-176523

Malicious code in sass-loader-castor-prettier-stylelint-lint npm...

Malicious code in sass-loader-canopus-mesosphere-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd6bbcda59d091061be1dc396ddc1689c6765b89ec42a4abe98eb51e16a4fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187487 Malicious code in inquirer-flare-sass-loader-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9ac73491da4c0bbc3063c9fee7d300beb6e658c1d0164abc26edafd86238d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...