235 matches found
Malicious Package
Overview leda-envconfig-odin-sass-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview leda-acamar-sequelize-sass-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Malicious code in joviology-shelljs-sass-loader-areology (npm)
The package joviology-shelljs-sass-loader-areology was found to contain malicious code. --- Credit: OpenSSF source...
MAL-2025-189357 Malicious code in sass-loader-prompts-inquirer-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510e31e6aebe1ba6798f088e0772983d71667602f005659f7f54fddb9b9facd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176613
Malicious code in rocket-package-sass-loader-avior npm...
EUVD-2025-176519
Malicious code in sass-loader-lepton-nebula-virgo npm...
MAL-2025-187487 Malicious code in inquirer-flare-sass-loader-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9ac73491da4c0bbc3063c9fee7d300beb6e658c1d0164abc26edafd86238d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in equinox-sass-loader-global-nestjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178395
Malicious code in inquirer-flare-sass-loader-tectonic npm...
EUVD-2025-177753
Malicious code in morgan-sass-loader-release-it-quark npm...
EUVD-2025-176522
Malicious code in sass-loader-cluster-link-jekyll npm...
EUVD-2025-175730
Malicious code in version-sass-loader-webpack-quantum-computing npm...
EUVD-2025-176523
Malicious code in sass-loader-castor-prettier-stylelint-lint npm...
MAL-2025-188329 Malicious code in nodejs-sass-loader-carina-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ff8f4ea5bf2c844ec1c897f02f47338bcfb40fdbe2cf01b0b824f0c1c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189177 Malicious code in remark-io-sass-loader-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178244
Malicious code in juno-saturnology-sass-loader-joviology npm...
MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175436
Malicious code in yonder-sass-loader-firebase-cosmicsilence npm...
Malicious code in sass-loader-iota-lyra-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3ffd8977035d4a0def8ba740d894f180ef6f02e00fdfd2d89633e773386f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...