Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

Malicious code in dactyl-postcss-slidev-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112226

Malicious code in javascript-postcss-loader-fornax-ariel npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-121730

Malicious code in spinner-fomalhaut-postcss-loader-private npm...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123511

Malicious code in postcss-loader-slidev-gulp-bellatrix npm...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124498

Malicious code in nextjs-procyon-postcss-chai npm...

EUVD-2025-114816

Malicious code in csrf-postcss-dependencies-upgrade npm...

EUVD-2025-124596

Malicious code in nconf-postcss-loader-gatsby-electron npm...

Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113911

Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...

EUVD-2025-111373

Malicious code in materialize-farout-postcss-loader-umbra npm...

Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123537

Malicious code in postcss-concurrently-envconfig-meteor npm...

EUVD-2025-123534

Malicious code in postcss-eslint-semantic-ui-metalsmith npm...

EUVD-2025-120325

Malicious code in xanadu-postcss-slides-reveal-md npm...

MAL-2025-146383 Malicious code in postcss-charon-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef6d8dafaa116a5ca64bdb2c40c47a42b8d292a31ce2ea6825553b57b0690c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...