833 matches found
Malicious code in xerxes-weywot-eris-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009132446e6de1cf47b905af2f0ffc0bcef9821a4af74b0725341515abc2680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116500
Malicious code in astro-enceladus-postcss-loader-iota npm...
EUVD-2025-121105
Malicious code in triton-phoebe-lint-staged-postcss npm...
EUVD-2025-114648
Malicious code in dagda-aquarius-postcss-loader-aquarius npm...
EUVD-2025-116514
Malicious code in ariel-ganymede-octans-postcss-loader npm...
EUVD-2025-122713
Malicious code in relay-sails-postcss-quito npm...
Malicious code in pipe-query-puppeteer-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123514
Malicious code in postcss-loader-sagitta-dynamo-altair npm...
Malicious code in postcss-xanthus-gulp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112888
Malicious code in helios-achernar-postcss-loader-cypress npm...
EUVD-2025-124538
Malicious code in neptune-stream-toml-postcss-loader npm...
EUVD-2025-115104
Malicious code in concurrently-firebase-remark-postcss-loader npm...
Malicious code in magellan-middleware-protractor-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-google-prompts-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115686
Malicious code in carina-postcss-auriga-less npm...
EUVD-2025-124610
Malicious code in nconf-deimos-postcss-delphinus npm...
EUVD-2025-121894
Malicious code in soap-postcss-kaus-concurrently npm...
EUVD-2025-113931
Malicious code in eris-postcss-meissa-orbit npm...
Malicious code in postcss-magellan-ursa-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...