EUVD-2025-177092

Malicious code in postcss-loader-prosthetics-loopback-javascript npm...

EUVD-2025-179677

Malicious code in colors-nightwatch-antimatter-postcss-loader npm...

Malicious code in holography-hercules-janus-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0747bbcd6e1cb7fbbcd0dc7b214cd578ce9437437d5ff92c3122cd217d7f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179031

Malicious code in eslint-postcss-loader-pm2-cressida npm...

EUVD-2025-177011

Malicious code in promise-umbra-css-loader-postcss-loader npm...

EUVD-2025-175820

Malicious code in uninstall-semantic-ui-await-postcss npm...

EUVD-2025-175975

Malicious code in testcafe-postcss-europa-atlas npm...

Malicious code in nestjs-postcss-loader-slides-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d6caff4f79bd4c2162390fa99edba8f8844e4ae965bc0081adee88785b282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176493

Malicious code in scorpius-vulcan-postcss-loader-centauri npm...

EUVD-2025-178184

Malicious code in koa-callback-postcss-loader-webdriver-manager npm...

EUVD-2025-179356

Malicious code in delphinus-miranda-postcss-loader-chariklo npm...

EUVD-2025-179257

Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c4ee8a47b6f72647c164486538c1d1765edb3e08b84f85ff8f0e12991b0634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188784 Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d9e1ff0973c423e2d9f4461d9daf809ea0aa47669997b06f7a4589bfbc9396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177364

Malicious code in paleoecology-backend-hydrogeology-postcss-loader npm...

EUVD-2025-177094

Malicious code in postcss-loader-install-thuban-pipe npm...

EUVD-2025-178294

Malicious code in jasmine-iota-apollo-postcss npm...

MAL-2025-188774 Malicious code in postcss-babel-centauri-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c683267f7b701dbc99741dfd9571f4f23ae6cc76d8c453977e8cf968040fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188780 Malicious code in postcss-loader-hapi-publish-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30a4b6ed232f3a0f88e9b315c00447a3e16a47c406a885a51e8efb67a3253d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...