EUVD-2025-120936

Malicious code in update-child-process-xerxes-postcss npm...

EUVD-2025-120857

Malicious code in ursa-rocket-postcss-janus npm...

EUVD-2025-120827

Malicious code in venus-aldebaran-postcss-build npm...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

EUVD-2025-120603

Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin npm...

EUVD-2025-123118

Malicious code in publish-postcss-blaze-buffer npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

EUVD-2025-113039

Malicious code in grunt-quito-postcss-loader-koa npm...

EUVD-2025-123533

Malicious code in postcss-google-prompts-commitizen npm...

EUVD-2025-122713

Malicious code in relay-sails-postcss-quito npm...

EUVD-2025-114974

Malicious code in cors-schema-nightwatch-postcss-loader npm...

EUVD-2025-123894

Malicious code in pegasus-eslint-plugin-postcss-iota npm...

EUVD-2025-123817

Malicious code in perseus-postcss-loader-janus-gacrux npm...

EUVD-2025-123542

Malicious code in postcss-atlas-graphql-spectron-webdriver npm...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

EUVD-2025-123543

Malicious code in postcss-airbnb-query-start npm...

Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123525

Malicious code in postcss-loader-galaxy-kaus-cygnus npm...

EUVD-2025-116514

Malicious code in ariel-ganymede-octans-postcss-loader npm...

Malicious code in postcss-xanthus-gulp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...