EUVD-2025-122256

Malicious code in sass-loader-forever-vulcan-mysql npm...

EUVD-2025-122687

Malicious code in release-it-sass-loader-parcel-fork npm...

EUVD-2025-114870

Malicious code in cressida-nebula-sass-loader-algol npm...

EUVD-2025-121948

Malicious code in sirius-sedna-sass-loader-mongoose npm...

EUVD-2025-121159

Malicious code in transform-node-sass-jwt-mutation npm...

EUVD-2025-123421

Malicious code in prettier-rehype-aquarius-node-sass npm...

Malicious code in node-sass-process-wolf-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5009110c757b0598a61838ec0b3547d6aecab8a31eefd10856eb59291fa0ccda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113512

Malicious code in fork-start-node-sass-neptune npm...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124390

Malicious code in node-sass-cli-phenomic-webpack npm...

Malicious code in scorpius-sass-loader-jekyll-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9069ae233c85f24ea1a43e58d24f242ee930f7dce85b47136affc3a6ff7321f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112734

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...

EUVD-2025-114428

Malicious code in docusaurus-websockets-sass-loader-upgrade npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-111519

Malicious code in lynx-node-sass-hermes-json npm...

EUVD-2025-122238

Malicious code in sass-loader-redis-atlas-command npm...

MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122243

Malicious code in sass-loader-nightwatch-await-hermes npm...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...