759 matches found
MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phoebe-sass-loader-luna-reveal-md (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122242
Malicious code in sass-loader-npm-markdownlint-apollo npm...
EUVD-2025-115441
Malicious code in changelog-cosmiconfig-sass-loader-commitlint npm...
Malicious code in testcafe-sass-loader-morgan-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sass-loader-corvus-kastra-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f118cb79bf026a1e89581f7c116843c889e90b5bda96cc3d0b56a412403b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122262
Malicious code in sass-loader-bulma-eleventy-vuepress npm...
EUVD-2025-114230
Malicious code in elara-jovian-fornax-sass-loader npm...
EUVD-2025-122246
Malicious code in sass-loader-mongodb-elara-norma npm...
EUVD-2025-114988
Malicious code in cors-framework-promise-sass-loader npm...
EUVD-2025-124645
Malicious code in nashira-farout-sass-loader-private npm...
EUVD-2025-116463
Malicious code in async-yonder-node-sass-configstore npm...
EUVD-2025-111248
Malicious code in mensa-typeorm-node-sass-ursa npm...
EUVD-2025-124366
Malicious code in node-sass-tool-resolvers-winston npm...
Malicious code in hugo-mira-node-sass-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c2ce75884a9a6585371f9a0621f88401c19a99cbc6608575c06f39381bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111883
Malicious code in kronos-umbriel-sass-loader-cassini npm...
MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...