807 matches found
Malicious code in dactyl-postcss-slidev-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114816
Malicious code in csrf-postcss-dependencies-upgrade npm...
EUVD-2025-116730
Malicious code in altair-xerxes-postcss-postgres npm...
EUVD-2025-124598
Malicious code in nconf-nodemon-start-postcss npm...
EUVD-2025-112181
Malicious code in jest-rigel-postcss-loader-sqlite npm...
EUVD-2025-114161
Malicious code in elektra-link-postcss-loader-cordelia npm...
EUVD-2025-122221
Malicious code in schema-zenobia-lint-staged-postcss npm...
EUVD-2025-115170
Malicious code in commitizen-postcss-phoebe-jest npm...
EUVD-2025-121505
Malicious code in sync-envconfig-apollo-postcss npm...
EUVD-2025-111423
Malicious code in markdown-pdf-ganymede-miranda-postcss npm...
EUVD-2025-123504
Malicious code in postcss-neptune-ursa-nextjs npm...
EUVD-2025-123502
Malicious code in postcss-procyon-xanadu-run-script npm...
EUVD-2025-113911
Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...
Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123527
Malicious code in postcss-loader-europa-webdriver-mocha-arcturus npm...
EUVD-2025-123817
Malicious code in perseus-postcss-loader-janus-gacrux npm...
EUVD-2025-123539
Malicious code in postcss-chalk-cassini-hugo npm...
Malicious code in slidev-postcss-loader-non-blocking-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908ac57851e5eb2a493ddb3438f9e04e69b5b2d95cb824b69490b1cbee3ddba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...