EUVD-2025-124376

Malicious code in node-sass-jsonp-parcel-transport npm...

EUVD-2025-123125

Malicious code in publish-node-sass-deimos-node-sass npm...

EUVD-2025-124378

Malicious code in node-sass-grunt-pegasus-convict npm...

EUVD-2025-124383

Malicious code in node-sass-firebase-enceladus-loopback npm...

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114948

Malicious code in corvus-node-sass-delphinus-nightwatch npm...

Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124377

Malicious code in node-sass-iota-hapi-bulma npm...

EUVD-2025-120631

Malicious code in wasat-public-commitlint-node-sass npm...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

EUVD-2025-114450

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...

EUVD-2025-116276

Malicious code in axios-docusaurus-node-sass-html-webpack-plugin npm...

MAL-2025-145533 Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148542 Malicious code in terser-webpack-plugin-airbnb-test-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a06295fbc84afce143fd5b0a10715eb54d6bfc38ec32d8c2022006a9c0cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145555 Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145543 Malicious code in node-sass-grunt-pegasus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3c54c740df1f32c0e75fde5313e8343615e826bf2ce974000fbe377a00210e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114459

Malicious code in dione-spica-node-sass-puppeteer npm...

MAL-2025-147474 Malicious code in rocket-node-sass-transport-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091155c6dabce4639e5daa79ad578fd54677999586db168e80ab5458d8580cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...