EUVD-2025-177562

Malicious code in node-sass-mutation-cladistics-helios npm...

EUVD-2025-177563

Malicious code in node-sass-luna-ora-terser-webpack-plugin npm...

EUVD-2025-177560

Malicious code in node-sass-nuxtjs-octans-eris npm...

EUVD-2025-177559

Malicious code in node-sass-slides-koa-hexo npm...

EUVD-2025-176741

Malicious code in regulus-node-sass-hugo-mensa npm...

EUVD-2025-177836

Malicious code in mineralogy-oauth-eslint-node-sass npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...

EUVD-2025-179457

Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass npm...

EUVD-2025-180410

Malicious code in antd-node-sass-zenobia-eris npm...

EUVD-2025-179739

Malicious code in child-process-concurrently-chakra-ui-node-sass npm...

EUVD-2025-179736

Malicious code in child-process-stratigraphy-subduction-node-sass npm...

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111701

Malicious code in link-local-node-sass-puppeteer npm...

EUVD-2025-111518

Malicious code in lynx-node-sass-rocket-taurus npm...

EUVD-2025-111327

Malicious code in meissa-altair-tool-node-sass npm...

EUVD-2025-111248

Malicious code in mensa-typeorm-node-sass-ursa npm...

EUVD-2025-112329

Malicious code in jabbah-node-sass-neptune-sirius npm...

Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-mira-node-sass-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c2ce75884a9a6585371f9a0621f88401c19a99cbc6608575c06f39381bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...