961 matches found
EUVD-2025-114816
Malicious code in csrf-postcss-dependencies-upgrade npm...
EUVD-2025-115505
Malicious code in chai-procyon-postcss-loader-forever npm...
EUVD-2025-123817
Malicious code in perseus-postcss-loader-janus-gacrux npm...
EUVD-2025-113459
Malicious code in fornax-selenium-postcss-loader-middleware npm...
EUVD-2025-120102
Malicious code in yonder-altair-commitlint-config-angular-postcss npm...
MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121505
Malicious code in sync-envconfig-apollo-postcss npm...
Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123502
Malicious code in postcss-procyon-xanadu-run-script npm...
Malicious code in capella-got-norma-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124598
Malicious code in nconf-nodemon-start-postcss npm...
EUVD-2025-123503
Malicious code in postcss-postcss-package-impulse npm...
Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in materialize-farout-postcss-loader-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123534
Malicious code in postcss-eslint-semantic-ui-metalsmith npm...
EUVD-2025-113004
Malicious code in grus-vulcan-postcss-terser npm...
EUVD-2025-115223
Malicious code in comet-parcel-perseus-postcss-loader npm...
MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-rocket-postcss-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...