EUVD-2025-122563

Malicious code in rest-nightmare-postcss-loader-ophiuchus npm...

EUVD-2025-113030

Malicious code in grus-avior-sirius-postcss npm...

EUVD-2025-123499

Malicious code in postcss-slides-browserify-less-loader npm...

EUVD-2025-116517

Malicious code in ariel-docusaurus-build-postcss npm...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123501

Malicious code in postcss-protractor-karma-configstore npm...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123537

Malicious code in postcss-concurrently-envconfig-meteor npm...

Malicious code in enif-postcss-winston-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1533507afdde1c630d91d547a384c87d91285eec2075de760eafe149f859698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122221

Malicious code in schema-zenobia-lint-staged-postcss npm...

EUVD-2025-115718

Malicious code in capella-got-norma-postcss npm...

EUVD-2025-124040

Malicious code in ora-electron-builder-postcss-umbra npm...

Malicious code in slidev-postcss-loader-non-blocking-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908ac57851e5eb2a493ddb3438f9e04e69b5b2d95cb824b69490b1cbee3ddba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123522

Malicious code in postcss-loader-meteor-mocha-phoenix npm...

EUVD-2025-122312

Malicious code in sagitta-postcss-uninstall-delphinus npm...

EUVD-2025-121695

Malicious code in sqlite-jabbah-cross-env-postcss-loader npm...

EUVD-2025-115223

Malicious code in comet-parcel-perseus-postcss-loader npm...

EUVD-2025-114161

Malicious code in elektra-link-postcss-loader-cordelia npm...

EUVD-2025-123503

Malicious code in postcss-postcss-package-impulse npm...

Malicious code in sagitta-postcss-uninstall-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965478c6b9162d383cd0ae40f14f30f3ff3dca22509b4bec5ce74b6e12f15ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...