MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146405 Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123816

Malicious code in perseus-postcss-loader-thuban-cosmiconfig npm...

EUVD-2025-123514

Malicious code in postcss-loader-sagitta-dynamo-altair npm...

EUVD-2025-121430

Malicious code in telesto-pulsar-postcss-loader-indus npm...

EUVD-2025-124280

Malicious code in norma-fusion-corvus-postcss-loader npm...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-quito-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff2bf6dc026adfb7fcf087d65584c298b75dd1842c5baff878381350cd0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114161

Malicious code in elektra-link-postcss-loader-cordelia npm...

EUVD-2025-113053

Malicious code in grunt-development-postcss-loader-hydra npm...

EUVD-2025-115507

Malicious code in chai-postcss-loader-subscription-epimetheus npm...

EUVD-2025-123523

Malicious code in postcss-loader-luna-eslint-despina npm...

EUVD-2025-113039

Malicious code in grunt-quito-postcss-loader-koa npm...

MAL-2025-146413 Malicious code in postcss-loader-webdriver-manager-chalk-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a4091768432e806b132a6147bd0d7b9388cffec761aaf5c90f18b1fb1576a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147530 Malicious code in rollup-postcss-loader-xanadu-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f558dd12ed39569dd372e118be9afd8a3636ac8fdaff883749c0113325e68b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123506

Malicious code in postcss-loader-yakutsk-europa-orbit npm...

EUVD-2025-121913

Malicious code in slidev-postcss-loader-non-blocking-dagda npm...

EUVD-2025-123526

Malicious code in postcss-loader-fork-levels-venus npm...