961 matches found
MAL-2025-139185 Malicious code in acamar-postcss-eleventy-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad70d739b42124f7635a058a8dd4723e947b5e3756838b101ab6ccade1f94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145892 Malicious code in ora-postcss-dotenv-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yildun-postcss-meteor-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-slides-browserify-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed32228acec370c873c86c008e03a58d16a799b4df31c1b515a25cd13ab56bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145641 Malicious code in norma-fusion-corvus-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145405 Malicious code in nestjs-terser-postcss-loader-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147633 Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144285 Malicious code in leda-pino-pretty-command-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce119a64f69bf04c213d4d6ae4eb4186c8268e2283415e92a5a68319226bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112484
Malicious code in init-postcss-markdown-pdf-sequelize npm...
Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123542
Malicious code in postcss-atlas-graphql-spectron-webdriver npm...