Malicious code in postcss-hotfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4d8ad8f9c133d2d8680b4d666d442b455bbd1579dea5cd5582a883fc4f0b5 The package postcss-hotfix was found to contain malicious code...

MAL-2026-1822 Malicious code in postcss-hotfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4d8ad8f9c133d2d8680b4d666d442b455bbd1579dea5cd5582a883fc4f0b5 The package postcss-hotfix was found to contain malicious code...

org.webjars.npm:cssnano (5.1.14), org.webjars.npm:cssnano-preset-default (5.2.13) +2 more potentially affected by CVE-2026-29074 via org.webjars.npm:svgo (2.8.0)

org.webjars.npm:svgo MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:svgo and may be impacted: - org.webjars.npm:cssnano 5.1.14 - org.webjars.npm:cssnano-preset-default 5.2.13 - org.webjars.npm:esbuild-plugin-svg 0.1...

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Improper Input Validation due to postcss

Summary postcss is used by IBM watsonx Orchestrate Developer Edition as part of wxo-chat Vulnerability Details CVEID:CVE-2023-44270 DESCRIPTION: An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepa...

Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...

EUVD-2025-178294

Malicious code in jasmine-iota-apollo-postcss npm...

EUVD-2025-179677

Malicious code in colors-nightwatch-antimatter-postcss-loader npm...

EUVD-2025-177511

Malicious code in nuxtjs-fomalhaut-postcss-avior npm...

EUVD-2025-177102

Malicious code in postcss-ablation-hercules-darkmatter npm...

EUVD-2025-177090

Malicious code in postcss-mongodb-astrometry-eslint-config npm...

EUVD-2025-176493

Malicious code in scorpius-vulcan-postcss-loader-centauri npm...

EUVD-2025-176890

Malicious code in puppeteer-tailwindcss-karma-postcss npm...

EUVD-2025-179302

Malicious code in development-postcss-loader-webpack-cosmicweb npm...

EUVD-2025-177100

Malicious code in postcss-development-cosmogenic-mongodb npm...

EUVD-2025-176850

Malicious code in quark-postcss-soap-nova npm...

EUVD-2025-178118

Malicious code in levels-await-postcss-comet npm...

EUVD-2025-177093

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy npm...

EUVD-2025-178184

Malicious code in koa-callback-postcss-loader-webdriver-manager npm...

MAL-2025-188371 Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187009 Malicious code in forever-cygnus-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fd6949db8f73f60ad61fd46e85a491a3d296a9479c600d2a79f928c0d66e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...