EUVD-2025-121076

Malicious code in typeorm-node-sass-karma-schema npm...

EUVD-2025-121935

Malicious code in slides-module-node-sass-venus npm...

EUVD-2025-111701

Malicious code in link-local-node-sass-puppeteer npm...

EUVD-2025-113812

Malicious code in europa-vuepress-sass-loader-graphql npm...

EUVD-2025-122247

Malicious code in sass-loader-meissa-pino-pretty-zenobia npm...

Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115579

Malicious code in centauri-element-ui-stream-sass-loader npm...

EUVD-2025-121209

Malicious code in toml-node-sass-lint-staged-andromeda npm...

EUVD-2025-122064

Malicious code in semantic-ui-version-cordelia-sass-loader npm...

EUVD-2025-116843

Malicious code in airbnb-node-sass-kastra-miranda npm...

EUVD-2025-122448

Malicious code in rocket-node-sass-transport-buffer npm...

Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122255

Malicious code in sass-loader-foundation-jsonp-react-bootstrap npm...

EUVD-2025-122252

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog npm...

MAL-2025-146797 Malicious code in publish-node-sass-deimos-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529397a0c3925e7719a49c6d9735e9ee960c0211188a69882b13263a692e1931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111858

Malicious code in leda-acamar-sequelize-sass-loader npm...

EUVD-2025-114604

Malicious code in deimos-sass-loader-quark-dotenv npm...

EUVD-2025-124386

Malicious code in node-sass-eclipse-flare-nashira npm...

Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...