EUVD-2025-122255

Malicious code in sass-loader-foundation-jsonp-react-bootstrap npm...

EUVD-2025-120960

Malicious code in uninstall-sass-loader-pegasus-weywot npm...

EUVD-2025-121076

Malicious code in typeorm-node-sass-karma-schema npm...

EUVD-2025-122252

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...

Malicious code in luna-sass-loader-centaurus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2278034b7ff68a8192cf1094d25a5a2c99ad341cce263a582564d4c2ef488cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123223

Malicious code in protractor-sass-loader-test-gemini npm...

Malicious code in ultra-sass-loader-pegasus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582c937e56d01f391201e9c3ab543d08c5f1fefed78d980ff35171b20714de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124021

Malicious code in ora-yaml-yildun-node-sass npm...

EUVD-2025-124165

Malicious code in oberon-sass-loader-supervisor-ultra npm...

EUVD-2025-122009

Malicious code in shelljs-heka-sass-loader-gemini npm...

EUVD-2025-116471

Malicious code in async-node-sass-fork-pulsar npm...

EUVD-2025-122722

Malicious code in relay-iota-sass-loader-enceladus npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124386

Malicious code in node-sass-eclipse-flare-nashira npm...

EUVD-2025-113585

Malicious code in flare-grunt-sass-loader-callback npm...

MAL-2025-147661 Malicious code in sass-loader-callback-oauth-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212c3f3b0e02fdf86f047a32b47e085f6d54d34e5a3f94920acf5f2c829da336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145527 Malicious code in node-sass-auth-ursa-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1d32c1b5d407a6418140a9935485f4f0908661c8b028023df0857f9c764648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142600 Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...