EUVD-2025-114459

Malicious code in dione-spica-node-sass-puppeteer npm...

Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122252

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...

EUVD-2025-121159

Malicious code in transform-node-sass-jwt-mutation npm...

EUVD-2025-111701

Malicious code in link-local-node-sass-puppeteer npm...

EUVD-2025-111519

Malicious code in lynx-node-sass-hermes-json npm...

EUVD-2025-111454

Malicious code in magellan-sass-loader-hermes-vortex npm...

EUVD-2025-111327

Malicious code in meissa-altair-tool-node-sass npm...

EUVD-2025-111276

Malicious code in meissa-wolf-server-sass-loader npm...

EUVD-2025-111269

Malicious code in mensa-cosmiconfig-sass-loader-meissa npm...

EUVD-2025-111248

Malicious code in mensa-typeorm-node-sass-ursa npm...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

EUVD-2025-112585

Malicious code in ignite-sqlite-celeste-sass-loader npm...

EUVD-2025-112329

Malicious code in jabbah-node-sass-neptune-sirius npm...

EUVD-2025-112180

Malicious code in jest-sass-loader-axios-algol npm...

EUVD-2025-111883

Malicious code in kronos-umbriel-sass-loader-cassini npm...

EUVD-2025-111870

Malicious code in lacerta-hyperion-cors-sass-loader npm...

EUVD-2025-111845

Malicious code in leda-envconfig-odin-sass-loader npm...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...