MAL-2026-11775 Malicious code in @ornikar/rollup-plugin-postcss (npm)

npm/@ornikar/rollup-plugin-postcss is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

EUVD-2025-123894

Malicious code in pegasus-eslint-plugin-postcss-iota npm...

EUVD-2025-111127

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor npm...

Malicious code in loom-plugin-postcss (npm)

The package loom-plugin-postcss was found to contain malicious code...

MAL-2025-25579 Malicious code in loom-plugin-postcss (npm)

The package loom-plugin-postcss was found to contain malicious code...