EUVD-2025-120856

Malicious code in ursa-sass-loader-orbit-async npm...

Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-ursa-sass-loader-stream (npm)

The package cassini-ursa-sass-loader-stream was found to contain malicious code...

MAL-2025-16631 Malicious code in cassini-ursa-sass-loader-stream (npm)

The package cassini-ursa-sass-loader-stream was found to contain malicious code...