Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122226

Malicious code in schema-init-cosmiconfig-postcss-loader npm...

EUVD-2025-116923

Malicious code in acamar-nightmare-ophiuchus-postcss npm...

EUVD-2025-112744

Malicious code in html-webpack-plugin-postcss-aether-magellan npm...

EUVD-2025-123648

Malicious code in playwright-bellatrix-postcss-loader-query npm...

EUVD-2025-122136

Malicious code in sedna-postcss-gravity-lacerta npm...

Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-capella-jabbah-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bad8467190852c493002cd67a7360ff1149c14ec334228073775c07a0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122392

Malicious code in rollup-postcss-loader-xanadu-relay npm...

Malicious code in yildun-postcss-meteor-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147756 Malicious code in sedna-carpo-command-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a24b4b00f49c87b40537793e078710621ed57e859a9a24b4c06e73f4a01690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146393 Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149072 Malicious code in ursa-rocket-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145405 Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139185 Malicious code in acamar-postcss-eleventy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad70d739b42124f7635a058a8dd4723e947b5e3756838b101ab6ccade1f94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149270 Malicious code in warp-jwt-postcss-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e9ab47f0b83fb7255c5c651a96f89e85ee9000c6a622634dd55b0b7c05f575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...