EUVD-2025-123648

Malicious code in playwright-bellatrix-postcss-loader-query npm...

EUVD-2025-123526

Malicious code in postcss-loader-fork-levels-venus npm...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123520

Malicious code in postcss-loader-mutation-command-procyon npm...

Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123118

Malicious code in publish-postcss-blaze-buffer npm...

EUVD-2025-122307

Malicious code in sagitta-registry-andromeda-postcss npm...

EUVD-2025-113204

Malicious code in gemini-nova-postcss-loader-grus npm...

Malicious code in perseus-postcss-loader-thuban-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f8b923d176dbf13f318330091afc5a22441ff682eae8e7d2c7fc2859adbf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121342

Malicious code in test-umbriel-postcss-proxima npm...

EUVD-2025-115507

Malicious code in chai-postcss-loader-subscription-epimetheus npm...

EUVD-2025-123542

Malicious code in postcss-atlas-graphql-spectron-webdriver npm...

EUVD-2025-123505

Malicious code in postcss-magellan-ursa-zenobia npm...

Malicious code in postcss-loader-sagitta-dynamo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115582

Malicious code in centauri-configstore-postcss-mutation npm...

EUVD-2025-121446

Malicious code in taurus-uninstall-commitizen-postcss-loader npm...

Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...