MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146386 Malicious code in postcss-deimos-express-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a01bdc174dfd05d600759d6d9aab8707546cd8172951c7e942208348b2d8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139755 Malicious code in auth0-request-postcss-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fca1fc606cf6304fd682277d3fe822752201f5db947bc62472a4202d2ddc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139588 Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146425 Malicious code in postcss-xanadu-test-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829bbcc100b6a0075043e2dbd7df90af59ab633374fca956c513e20a11fd2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145310 Malicious code in nconf-deimos-postcss-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cce33f39643e61e6f6e8ef24989339dfae8ee7032912dd33dfc700f985496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145641 Malicious code in norma-fusion-corvus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147359 Malicious code in rest-nightmare-postcss-loader-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ad78d5c1b5a3137b663ae91f27e0355dcea0816dbe228c0eebaa243099d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146393 Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146404 Malicious code in postcss-loader-oauth-chai-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48c54ba2e46e0cf1db9575bf6d04ad71d5e2ff725f1353c8b6b9d03cdf82fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146401 Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120827

Malicious code in venus-aldebaran-postcss-build npm...

Malicious code in postcss-xanthus-gulp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142055 Malicious code in enif-postcss-nestjs-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec138f7c2f3b7576ed66df5c83a3a39db74781bf2a78466f5371bf22fedfc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143108 Malicious code in grus-vulcan-postcss-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36086da343f1f0070583626b0a77247b177ec3186f1550f7756ef30c223b78a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149072 Malicious code in ursa-rocket-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148477 Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115825

Malicious code in cache-postcss-phoebe-xenos npm...

MAL-2025-148498 Malicious code in telesto-pulsar-postcss-loader-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...