Lucene search
+L

280 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:15 a.m.•4 views

Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in kaus-petrology-postcss-loader-andromeda (npm)

The package kaus-petrology-postcss-loader-andromeda was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:13 a.m.•3 views

Malicious code in jsonp-jwt-avior-postcss-loader (npm)

Source: amazon-inspector d24d5177d5a69fe4e89ff96082eb699b3dc32aef498477c15da8c7939e6d4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•5 views

Malicious code in jest-rigel-postcss-loader-sqlite (npm)

Source: amazon-inspector fe203cf1a0effbe1e89e7c7fe0afa809a61df05c8ad50ba9667b388e17cfabd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•2 views

Malicious code in jest-titan-postcss-loader-galaxy (npm)

Source: amazon-inspector 2a277d7a2ceb2b1f9af71797414949b7377311b1cbeadc87adacedba54221430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•3 views

Malicious code in javascript-postcss-loader-fornax-ariel (npm)

Source: amazon-inspector 09a46307816ef7e2a4a5c766bce7438cb607b945a2cd4692da71b738b8332511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•5 views

Malicious code in javascript-nightmare-jekyll-postcss-loader (npm)

The package javascript-nightmare-jekyll-postcss-loader was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•4 views

Malicious code in janus-postcss-loader-element-ui-spectron (npm)

The package janus-postcss-loader-element-ui-spectron was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:15 p.m.•4 views

Malicious code in janus-firebase-postcss-loader-cygnus (npm)

Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in iota-iota-avior-postcss-loader (npm)

Source: amazon-inspector 842e087fcc43bac6c5e943ef3f5d979ffb2ba3d2ca75b0a413ad72b3d83f8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in interstellarmedium-postcss-loader-chromedriver-innercore (npm)

The package interstellarmedium-postcss-loader-chromedriver-innercore was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•5 views

Malicious code in ignite-morgan-postcss-loader-morgan (npm)

Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•4 views

Malicious code in helios-achernar-postcss-loader-cypress (npm)

Source: amazon-inspector 72aa3bf1e9bab5bd6a52eb05ce85e1cd2626bc73ef8ab794ae82316c4d761497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•4 views

Malicious code in grunt-quito-postcss-loader-koa (npm)

Source: amazon-inspector d826d965e9cc8b660a3f05be49a7e3a2285006bc084e6fdd7c51e38c1d14db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•3 views

Malicious code in grunt-development-postcss-loader-hydra (npm)

Source: amazon-inspector be72e877380a897e38fc8133f74f41e0fe420c4229d9220048ed2943d052ed2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•3 views

Malicious code in exoplanetology-postcss-loader-local-quantum-computing (npm)

The package exoplanetology-postcss-loader-local-quantum-computing was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-postcss-loader-pm2-cressida (npm)

Source: amazon-inspector 1ec1c3484202bd2ceceb0d9cc9fd1bd478062a4ed6d75ccfeb1f473655b714b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•6 views

Malicious code in eslint-config-postcss-loader-ignite-webdriver-mocha (npm)

Source: amazon-inspector 4204c7bdbd78af14a75aad5eb09da611126c238cf10af0e8fcabcd3667cc3cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•4 views

Malicious code in equinox-betelgeuse-postcss-loader-playwright (npm)

The package equinox-betelgeuse-postcss-loader-playwright was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder