EUVD-2025-123524

Malicious code in postcss-loader-halley-middleware-xanadu npm...

MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-postcss-loader-halley-tardigrade (npm)

The package venus-postcss-loader-halley-tardigrade was found to contain malicious code...