EUVD-2025-123526

Malicious code in postcss-loader-fork-levels-venus npm...

EUVD-2025-116514

Malicious code in ariel-ganymede-octans-postcss-loader npm...

EUVD-2025-122763

Malicious code in regulus-transport-postcss-carina npm...

EUVD-2025-112385

Malicious code in iota-iota-avior-postcss-loader npm...

EUVD-2025-122713

Malicious code in relay-sails-postcss-quito npm...

Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-postcss-winston-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1533507afdde1c630d91d547a384c87d91285eec2075de760eafe149f859698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112303

Malicious code in janus-firebase-postcss-loader-cygnus npm...

EUVD-2025-112114

Malicious code in jsonp-jwt-avior-postcss-loader npm...

EUVD-2025-114339

Malicious code in dotenv-safe-postcss-loader-taurus-webpack npm...

EUVD-2025-111127

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor npm...

EUVD-2025-116062

Malicious code in blitz-cressida-cross-env-postcss npm...

EUVD-2025-123504

Malicious code in postcss-neptune-ursa-nextjs npm...

EUVD-2025-124498

Malicious code in nextjs-procyon-postcss-chai npm...

EUVD-2025-114688

Malicious code in cz-conventional-changelog-json-postcss-babel npm...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...