Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-177831

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...

fstlncomponent (>=1.0.1, <=1.0.7) potentially affected by unknown CVE via plugin-sass (0.0.1-security)

plugin-sass NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

Malicious code in plugin-sass (npm)

The package plugin-sass was found to contain malicious code...

MAL-2025-29416 Malicious code in plugin-sass (npm)

The package plugin-sass was found to contain malicious code...