EUVD-2025-177831

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...

Malicious code in plugin-sass (npm)

The package plugin-sass was found to contain malicious code...

fstlncomponent (>=1.0.1 <=1.0.7) potentially affected by unknown CVE via plugin-sass (=0.0.1-security)

plugin-sass NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

MAL-2025-29416 Malicious code in plugin-sass (npm)

The package plugin-sass was found to contain malicious code...