MAL-2025-147663 Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc8eca7c38080fbb463c3fef2953cb87fce95338e8574846d4a53c9f715036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114603

Malicious code in deimos-sass-loader-ursa-ini npm...

MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120960

Malicious code in uninstall-sass-loader-pegasus-weywot npm...

Malicious code in astrochemistry-robotics-sass-loader-polaris (npm)

The package astrochemistry-robotics-sass-loader-polaris was found to contain malicious code...

MAL-2025-45669 Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

MAL-2025-43960 Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)

The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...

Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

MAL-2025-43531 Malicious code in astrochemistry-robotics-sass-loader-polaris (npm)

The package astrochemistry-robotics-sass-loader-polaris was found to contain malicious code...

Malicious code in virgo-got-sass-loader-spica (npm)

The package virgo-got-sass-loader-spica was found to contain malicious code...

MAL-2025-28035 Malicious code in oberon-nightwatch-cassini-sass-loader (npm)

The package oberon-nightwatch-cassini-sass-loader was found to contain malicious code...

Malicious code in sass-loader-eventhoriz-darkenergy-mongodb (npm)

The package sass-loader-eventhoriz-darkenergy-mongodb was found to contain malicious code...

Malicious code in pavo-init-sass-loader-nodejs (npm)

The package pavo-init-sass-loader-nodejs was found to contain malicious code...

MAL-2025-26246 Malicious code in meteor-fomalhaut-izar-sass-loader (npm)

The package meteor-fomalhaut-izar-sass-loader was found to contain malicious code...

MAL-2025-32703 Malicious code in sass-loader-nebula-eleventy-figures (npm)

The package sass-loader-nebula-eleventy-figures was found to contain malicious code...