EUVD-2025-121446

Malicious code in taurus-uninstall-commitizen-postcss-loader npm...

EUVD-2025-123509

Malicious code in postcss-loader-telesto-vulcan-phenomic npm...

EUVD-2025-113467

Malicious code in fornax-postcss-loader-umbra-webdriver-manager npm...

EUVD-2025-123512

Malicious code in postcss-loader-semantic-release-slides-buffer npm...

Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-elara-izar-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c317d0382b6f96e1ca6051d7e83051beff238300fd09d2f8b337646c8765dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112226

Malicious code in javascript-postcss-loader-fornax-ariel npm...

Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122254

Malicious code in sass-loader-gatsby-chariklo-postcss-loader npm...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

EUVD-2025-124538

Malicious code in neptune-stream-toml-postcss-loader npm...

MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143999 Malicious code in jsonp-jwt-avior-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24d5177d5a69fe4e89ff96082eb699b3dc32aef498477c15da8c7939e6d4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120603

Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin npm...

Malicious code in postcss-loader-webdriver-manager-chalk-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a4091768432e806b132a6147bd0d7b9388cffec761aaf5c90f18b1fb1576a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-postcss-loader-thuban-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f8b923d176dbf13f318330091afc5a22441ff682eae8e7d2c7fc2859adbf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123522

Malicious code in postcss-loader-meteor-mocha-phoenix npm...

EUVD-2025-113459

Malicious code in fornax-selenium-postcss-loader-middleware npm...

EUVD-2025-112593

Malicious code in ignite-morgan-postcss-loader-morgan npm...