EUVD-2025-120102

Malicious code in yonder-altair-commitlint-config-angular-postcss npm...

EUVD-2025-114805

Malicious code in css-loader-gridsome-postcss-loader-yaml npm...

EUVD-2025-123542

Malicious code in postcss-atlas-graphql-spectron-webdriver npm...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-124596

Malicious code in nconf-postcss-loader-gatsby-electron npm...

EUVD-2025-120137

Malicious code in yaml-loopback-cors-postcss npm...

EUVD-2025-122863

Malicious code in react-bootstrap-europa-postcss-polaris npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

EUVD-2025-120386

Malicious code in wolf-cross-env-markdown-postcss-loader npm...

EUVD-2025-113004

Malicious code in grus-vulcan-postcss-terser npm...

EUVD-2025-116730

Malicious code in altair-xerxes-postcss-postgres npm...

EUVD-2025-120224

Malicious code in xerxes-gridsome-postcss-loader-google npm...

EUVD-2025-123860

Malicious code in pegasus-upgrade-gravity-postcss npm...

EUVD-2025-111517

Malicious code in lynx-parcel-telesto-postcss npm...

EUVD-2025-114054

Malicious code in enif-postcss-winston-weywot npm...

Malicious code in postcss-loader-sagitta-dynamo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123156

Malicious code in public-postcss-loader-nconf-fusion npm...

EUVD-2025-116175

Malicious code in bellatrix-bulma-postcss-deimos npm...

EUVD-2025-112661

Malicious code in hydra-postcss-heka-rigel npm...

Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...