EUVD-2025-122009

Malicious code in shelljs-heka-sass-loader-gemini npm...

EUVD-2025-122243

Malicious code in sass-loader-nightwatch-await-hermes npm...

MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148034 Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121190

Malicious code in tool-kronos-cosmos-sass-loader npm...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

MAL-2025-45669 Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

MAL-2025-43960 Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)

The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...

Malicious code in astrochemistry-robotics-sass-loader-polaris (npm)

The package astrochemistry-robotics-sass-loader-polaris was found to contain malicious code...

MAL-2025-43531 Malicious code in astrochemistry-robotics-sass-loader-polaris (npm)

The package astrochemistry-robotics-sass-loader-polaris was found to contain malicious code...

Malicious code in algol-sagitta-sass-loader-jovian (npm)

The package algol-sagitta-sass-loader-jovian was found to contain malicious code...

Malicious code in cassini-ursa-sass-loader-stream (npm)

The package cassini-ursa-sass-loader-stream was found to contain malicious code...

Malicious code in meteor-fomalhaut-izar-sass-loader (npm)

The package meteor-fomalhaut-izar-sass-loader was found to contain malicious code...