EUVD-2025-124364

Malicious code in node-sass-webpack-yonder-husky npm...

EUVD-2025-122985

Malicious code in quark-sass-loader-tethys-css-loader npm...

EUVD-2025-116885

Malicious code in adonis-sass-loader-eslint-config-convict npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124382

Malicious code in node-sass-foundation-helios-rate-limiter npm...

EUVD-2025-121127

Malicious code in transport-sass-loader-csv-kaus npm...

EUVD-2025-124379

Malicious code in node-sass-google-node-sass-jest npm...

EUVD-2025-124845

Malicious code in mocha-dotenv-node-sass-sagitta npm...

Malicious code in tailwindcss-sass-loader-markdown-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124165

Malicious code in oberon-sass-loader-supervisor-ultra npm...

EUVD-2025-121475

Malicious code in tailwindcss-sass-loader-markdown-odin npm...

Malicious code in sass-loader-bulma-eleventy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122262

Malicious code in sass-loader-bulma-eleventy-vuepress npm...

EUVD-2025-115903

Malicious code in bulma-airbnb-node-sass-frontend npm...

EUVD-2025-112329

Malicious code in jabbah-node-sass-neptune-sirius npm...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-sass-loader-jekyll-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9069ae233c85f24ea1a43e58d24f242ee930f7dce85b47136affc3a6ff7321f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...