EUVD-2025-116842

Malicious code in airbnb-node-sass-leda-procyon npm...

EUVD-2025-114459

Malicious code in dione-spica-node-sass-puppeteer npm...

EUVD-2025-124386

Malicious code in node-sass-eclipse-flare-nashira npm...

EUVD-2025-124368

Malicious code in node-sass-run-script-chariklo-uninstall npm...

EUVD-2025-124379

Malicious code in node-sass-google-node-sass-jest npm...

EUVD-2025-124371

Malicious code in node-sass-polaris-eridanus-dorado npm...

MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148542 Malicious code in terser-webpack-plugin-airbnb-test-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a06295fbc84afce143fd5b0a10715eb54d6bfc38ec32d8c2022006a9c0cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124364

Malicious code in node-sass-webpack-yonder-husky npm...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

EUVD-2025-123130

Malicious code in publish-local-typeorm-node-sass npm...

EUVD-2025-124369

Malicious code in node-sass-proxima-capella-eslint npm...

EUVD-2025-121533

Malicious code in supervisor-install-postgres-node-sass npm...

Malicious code in node-sass-pegasus-wezen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52e3a172551ddf3db63f6fea9966b87a818d20b2aca4af126ee46b0a6a920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-polaris-eridanus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e415838ebe67bde60565e881599dab4430e8c79f86c3048a0062a4c377bc419a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124382

Malicious code in node-sass-foundation-helios-rate-limiter npm...

EUVD-2025-116276

Malicious code in axios-docusaurus-node-sass-html-webpack-plugin npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115902

Malicious code in bulma-antares-update-node-sass npm...