EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

EUVD-2025-114005

Malicious code in epimetheus-regulus-sass-loader-uglify-js npm...

MAL-2025-148034 Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115579

Malicious code in centauri-element-ui-stream-sass-loader npm...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120580

Malicious code in webdriver-mocha-grus-zenobia-sass-loader npm...

EUVD-2025-113750

Malicious code in exec-sass-loader-acamar-halley npm...

EUVD-2025-111402

Malicious code in markdown-polaris-vega-sass-loader npm...

EUVD-2025-122249

Malicious code in sass-loader-leda-spica-antares npm...

MAL-2025-147661 Malicious code in sass-loader-callback-oauth-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212c3f3b0e02fdf86f047a32b47e085f6d54d34e5a3f94920acf5f2c829da336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...