759 matches found
MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122694
Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin npm...
EUVD-2025-112720
Malicious code in hugo-mira-node-sass-nashira npm...
EUVD-2025-122258
Malicious code in sass-loader-cors-forever-firebase npm...
Malicious code in node-sass-polaris-eridanus-dorado (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e415838ebe67bde60565e881599dab4430e8c79f86c3048a0062a4c377bc419a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120498
Malicious code in weywot-achernar-orbit-node-sass npm...
EUVD-2025-123223
Malicious code in protractor-sass-loader-test-gemini npm...
EUVD-2025-111533
Malicious code in luna-sass-loader-centaurus-aether npm...
EUVD-2025-120680
Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer npm...
EUVD-2025-124368
Malicious code in node-sass-run-script-chariklo-uninstall npm...
EUVD-2025-114372
Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...