Malicious code in postcss-loader-style-loader-foundation-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7af3a5be712e0cae8587eeca54d8551aab41011790b2cadb628fd9c4e66952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121730

Malicious code in spinner-fomalhaut-postcss-loader-private npm...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115038

Malicious code in convict-cypress-lacerta-postcss npm...

MAL-2025-143629 Malicious code in init-postcss-markdown-pdf-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146383 Malicious code in postcss-charon-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef6d8dafaa116a5ca64bdb2c40c47a42b8d292a31ce2ea6825553b57b0690c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122226

Malicious code in schema-init-cosmiconfig-postcss-loader npm...

EUVD-2025-112744

Malicious code in html-webpack-plugin-postcss-aether-magellan npm...

EUVD-2025-116923

Malicious code in acamar-nightmare-ophiuchus-postcss npm...

Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-await-janus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f95e8dca9374bd68093ca7b66d2bc1f9fe8b85ed4d42fe457323a52534de0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124594

Malicious code in nconf-procyon-postcss-ora npm...

Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122136

Malicious code in sedna-postcss-gravity-lacerta npm...

Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120975

Malicious code in uninstall-browserify-ganymede-postcss-loader npm...

EUVD-2025-123540

Malicious code in postcss-capella-jabbah-phenomic npm...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...