EUVD-2025-123156

Malicious code in public-postcss-loader-nconf-fusion npm...

MAL-2025-146766 Malicious code in public-postcss-loader-nconf-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8486c705b8b7152ab39cebfac6f20436a00b56f90d0140031aca814832186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...