961 matches found
EUVD-2025-111828
Malicious code in leda-pino-pretty-command-postcss npm...
EUVD-2025-122167
Malicious code in sedna-carpo-command-postcss-loader npm...
EUVD-2025-123532
Malicious code in postcss-loader-child-process-element-ui-weywot npm...
EUVD-2025-124015
Malicious code in orbit-europa-dorado-postcss-loader npm...
EUVD-2025-124515
Malicious code in nestjs-terser-postcss-loader-await npm...
EUVD-2025-123509
Malicious code in postcss-loader-telesto-vulcan-phenomic npm...
EUVD-2025-114054
Malicious code in enif-postcss-winston-weywot npm...
MAL-2025-144742 Malicious code in materialize-farout-postcss-loader-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148012 Malicious code in slidev-postcss-loader-non-blocking-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908ac57851e5eb2a493ddb3438f9e04e69b5b2d95cb824b69490b1cbee3ddba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114389
Malicious code in dotenv-parse-variables-eris-xenon-postcss npm...
EUVD-2025-120224
Malicious code in xerxes-gridsome-postcss-loader-google npm...
MAL-2025-146382 Malicious code in postcss-chalk-cassini-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd5f2d5d3d3bf33c23a3ca41571ccc6d77668f774fa2b3c8985024b5ed6051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vite-plugin-postcss-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-50835
Malicious code in vite-plugin-postcss-tools npm...
Malicious Package
Overview vite-plugin-postcss-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2021-1108
Malware in sbrugna...