MAL-2025-145549 Malicious code in node-sass-pegasus-wezen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52e3a172551ddf3db63f6fea9966b87a818d20b2aca4af126ee46b0a6a920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121155

Malicious code in transform-sass-loader-polaris-relay npm...

EUVD-2025-122064

Malicious code in semantic-ui-version-cordelia-sass-loader npm...

EUVD-2025-124364

Malicious code in node-sass-webpack-yonder-husky npm...

EUVD-2025-120856

Malicious code in ursa-sass-loader-orbit-async npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124382

Malicious code in node-sass-foundation-helios-rate-limiter npm...

EUVD-2025-111518

Malicious code in lynx-node-sass-rocket-taurus npm...

EUVD-2025-121127

Malicious code in transport-sass-loader-csv-kaus npm...

EUVD-2025-124379

Malicious code in node-sass-google-node-sass-jest npm...

EUVD-2025-122237

Malicious code in sass-loader-xml-altair-dotenv-safe npm...

EUVD-2025-124845

Malicious code in mocha-dotenv-node-sass-sagitta npm...

Malicious code in tailwindcss-sass-loader-markdown-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124165

Malicious code in oberon-sass-loader-supervisor-ultra npm...

EUVD-2025-121475

Malicious code in tailwindcss-sass-loader-markdown-odin npm...

EUVD-2025-121891

Malicious code in soap-sass-loader-sirius-cache npm...

Malicious code in sass-loader-bulma-eleventy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a65711d39747de192ef67f184c4fd698988ff5192aa042598d43cce931d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...