EUVD-2025-120827

Malicious code in venus-aldebaran-postcss-build npm...

EUVD-2025-114055

Malicious code in enif-postcss-nestjs-auth npm...

Malicious code in blitz-nodejs-postcss-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

EUVD-2025-124499

Malicious code in nextjs-postcss-galaxy-triton npm...

Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120975

Malicious code in uninstall-browserify-ganymede-postcss-loader npm...

Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124594

Malicious code in nconf-procyon-postcss-ora npm...

EUVD-2025-115582

Malicious code in centauri-configstore-postcss-mutation npm...

EUVD-2025-112993

Malicious code in gulp-nightmare-postcss-cordelia npm...

Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124029

Malicious code in ora-postcss-dotenv-server npm...

EUVD-2025-120137

Malicious code in yaml-loopback-cors-postcss npm...

EUVD-2025-123497

Malicious code in postcss-vuepress-nestjs-init npm...

EUVD-2025-122307

Malicious code in sagitta-registry-andromeda-postcss npm...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...