EUVD-2025-113039

Malicious code in grunt-quito-postcss-loader-koa npm...

EUVD-2025-111191

Malicious code in meteor-postcss-galaxy-markdown npm...

EUVD-2025-123501

Malicious code in postcss-protractor-karma-configstore npm...

EUVD-2025-123537

Malicious code in postcss-concurrently-envconfig-meteor npm...

EUVD-2025-111365

Malicious code in materialize-postcss-triton-dagda npm...

Malicious code in pipe-query-puppeteer-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

EUVD-2025-113200

Malicious code in gemini-postcss-loader-typeorm-procyon npm...

Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112744

Malicious code in html-webpack-plugin-postcss-aether-magellan npm...

EUVD-2025-112484

Malicious code in init-postcss-markdown-pdf-sequelize npm...

EUVD-2025-122307

Malicious code in sagitta-registry-andromeda-postcss npm...

EUVD-2025-116517

Malicious code in ariel-docusaurus-build-postcss npm...

EUVD-2025-112993

Malicious code in gulp-nightmare-postcss-cordelia npm...

EUVD-2025-111466

Malicious code in magellan-middleware-protractor-postcss-loader npm...

Malicious code in yildun-postcss-meteor-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...