885 matches found
MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146797 Malicious code in publish-node-sass-deimos-node-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529397a0c3925e7719a49c6d9735e9ee960c0211188a69882b13263a692e1931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144846 Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145549 Malicious code in node-sass-pegasus-wezen-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52e3a172551ddf3db63f6fea9966b87a818d20b2aca4af126ee46b0a6a920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145527 Malicious code in node-sass-auth-ursa-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1d32c1b5d407a6418140a9935485f4f0908661c8b028023df0857f9c764648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tailwindcss-react-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6f72d8d64a8612b01ed58fa0bcacd97698a820dcf3b2ebf50dec6e23831065 The package tailwindcss-react-sass was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview tailwindcss-react-sass is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
EUVD-2025-37954
Malicious code in tailwindcss-react-sass npm...
MAL-2025-49369 Malicious code in tailwindcss-react-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6f72d8d64a8612b01ed58fa0bcacd97698a820dcf3b2ebf50dec6e23831065 The package tailwindcss-react-sass was found to contain malicious code. Source: ghsa-malware...
libsass:data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::SelectorList in Sass::Eval::operator
Detailed Report: https://oss-fuzz.com/testcase?key=6440571217707008 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5d0d2d7969f0 Crash State: Bad-cast to Sass::PreValue from...
EUVD-2019-15852
Malware in sbrugna...