EUVD-2025-177563

Malicious code in node-sass-luna-ora-terser-webpack-plugin npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...

EUVD-2025-177564

Malicious code in node-sass-kastra-bellatrix-express npm...

EUVD-2025-177565

Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...

Malicious code in node-sass-mutation-cladistics-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6885c91a565b182a01da9b7068f4d8893253dd523b0543c925967026ab95431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177708

Malicious code in native-blackhole-parcel-node-sass npm...

EUVD-2025-177810

Malicious code in miranda-gacrux-stratigraphy-node-sass npm...

EUVD-2025-176741

Malicious code in regulus-node-sass-hugo-mensa npm...

EUVD-2025-179736

Malicious code in child-process-stratigraphy-subduction-node-sass npm...

MAL-2025-188323 Malicious code in node-sass-slides-koa-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188320 Malicious code in node-sass-mutation-cladistics-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6885c91a565b182a01da9b7068f4d8893253dd523b0543c925967026ab95431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177567

Malicious code in node-sass-commitlint-lynx-public npm...

EUVD-2025-177561

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin npm...

Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186082 Malicious code in chai-node-sass-biosignature-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189913 Malicious code in thermosphere-node-sass-farout-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afedec7a9c064479a8e2564724676591ba3d6387ea85cae80291cab11358ca4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179457

Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass npm...

Malicious code in node-sass-slides-koa-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175962

Malicious code in thermosphere-node-sass-farout-seismology npm...

EUVD-2025-180410

Malicious code in antd-node-sass-zenobia-eris npm...