EUVD-2025-124381

Malicious code in node-sass-gacrux-venus-cli npm...

EUVD-2025-124392

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan npm...

EUVD-2025-124391

Malicious code in node-sass-cli-charon-zenith npm...

EUVD-2025-116826

Malicious code in aldebaran-fetch-node-sass-koa npm...

EUVD-2025-123125

Malicious code in publish-node-sass-deimos-node-sass npm...

EUVD-2025-115903

Malicious code in bulma-airbnb-node-sass-frontend npm...

EUVD-2025-124385

Malicious code in node-sass-eleventy-framework-postcss-loader npm...

EUVD-2025-114948

Malicious code in corvus-node-sass-delphinus-nightwatch npm...

EUVD-2025-114450

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...

MAL-2025-145544 Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145539 Malicious code in node-sass-foundation-helios-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa148084f3aa7bdcf939f75d7ed0963f845ceea2b4be00e210a62320dee30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

Malicious code in node-sass-sequelize-init-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9820827f29fae3624ef8497c12accae1a6246f1b4a7a18bbfcaead007b9200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

MAL-2025-145543 Malicious code in node-sass-grunt-pegasus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3c54c740df1f32c0e75fde5313e8343615e826bf2ce974000fbe377a00210e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145549 Malicious code in node-sass-pegasus-wezen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52e3a172551ddf3db63f6fea9966b87a818d20b2aca4af126ee46b0a6a920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145533 Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147474 Malicious code in rocket-node-sass-transport-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091155c6dabce4639e5daa79ad578fd54677999586db168e80ab5458d8580cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...