231 matches found
MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quark-sass-loader-tethys-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112180
Malicious code in jest-sass-loader-axios-algol npm...
MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sass-loader-algol-perseus-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77664b9a0fb1e6506cf3e5b1505a16bda73fbef3380e9fa57914417417763e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122985
Malicious code in quark-sass-loader-tethys-css-loader npm...
MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148034 Malicious code in soap-sass-loader-sirius-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113495
Malicious code in fornax-electron-builder-electron-sass-loader npm...
EUVD-2025-111454
Malicious code in magellan-sass-loader-hermes-vortex npm...
Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121298
Malicious code in tethys-polaris-sass-loader-prettier-stylelint npm...
EUVD-2025-123438
Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 npm...
EUVD-2025-124301
Malicious code in non-blocking-sass-loader-celeste-norma npm...
EUVD-2025-122447
Malicious code in rocket-orbit-grus-sass-loader npm...
Malicious code in fornax-mongodb-ini-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92b178d3023eba948ee956d55dcf075ba19ba31ed8962ead5726e6adc9edbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...