MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114212

Malicious code in electron-builder-cassini-mutation-postcss-loader npm...

EUVD-2025-123506

Malicious code in postcss-loader-yakutsk-europa-orbit npm...

EUVD-2025-124700

Malicious code in mutation-chromedriver-postcss-loader-proxima npm...

EUVD-2025-122082

Malicious code in semantic-ui-cluster-hermes-postcss-loader npm...

EUVD-2025-123502

Malicious code in postcss-procyon-xanadu-run-script npm...

EUVD-2025-123817

Malicious code in perseus-postcss-loader-janus-gacrux npm...

EUVD-2025-121342

Malicious code in test-umbriel-postcss-proxima npm...

Malicious code in postcss-xanthus-gulp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115640

Malicious code in cassini-hyperion-fusion-postcss npm...

Malicious code in grus-vulcan-postcss-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36086da343f1f0070583626b0a77247b177ec3186f1550f7756ef30c223b78a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111152

Malicious code in middleware-postcss-loader-vulcan-configstore npm...

Malicious code in postcss-loader-commitizen-foundation-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122500

Malicious code in reveal-md-postcss-loader-enceladus-xanthus npm...

Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115825

Malicious code in cache-postcss-phoebe-xenos npm...

EUVD-2025-115747

Malicious code in canopus-hermes-postcss-loader-xanthus npm...

Malicious code in postcss-slides-browserify-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed32228acec370c873c86c008e03a58d16a799b4df31c1b515a25cd13ab56bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114895

Malicious code in cosmos-postcss-loader-iota-eslint-config npm...