EUVD-2025-122243

Malicious code in sass-loader-nightwatch-await-hermes npm...

EUVD-2025-124374

Malicious code in node-sass-magellan-mongodb-auth0 npm...

EUVD-2025-111454

Malicious code in magellan-sass-loader-hermes-vortex npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122238

Malicious code in sass-loader-redis-atlas-command npm...

EUVD-2025-111519

Malicious code in lynx-node-sass-hermes-json npm...

EUVD-2025-124089

Malicious code in ophiuchus-passport-process-sass-loader npm...

EUVD-2025-116463

Malicious code in async-yonder-node-sass-configstore npm...

EUVD-2025-124364

Malicious code in node-sass-webpack-yonder-husky npm...

EUVD-2025-122687

Malicious code in release-it-sass-loader-parcel-fork npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-axios-node-sass-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692cbc2f8639f5c959ed7f4b387d90952e4f3c2f0d55aed20eef5917ab13d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124389

Malicious code in node-sass-concurrently-markdown-ultra npm...

EUVD-2025-114870

Malicious code in cressida-nebula-sass-loader-algol npm...

EUVD-2025-124370

Malicious code in node-sass-process-wolf-init npm...

MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...