EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-124499

Malicious code in nextjs-postcss-galaxy-triton npm...

Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114276

Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster npm...

EUVD-2025-122896

Malicious code in radiant-tool-postcss-loader-algol npm...

EUVD-2025-122144

Malicious code in sedna-nightwatch-postcss-loader-mini-css-extract-plugin npm...

Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116098

Malicious code in betelgeuse-scorpius-postcss-loader-telesto npm...

Malicious code in xenos-zenobia-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e93a1b3cd01471b7d9b6c197d2d94f92723d90c6139fdfcd7711637980504d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114660

Malicious code in dactyl-postcss-slidev-phoebe npm...

Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120226

Malicious code in xerxes-foundation-postcss-loader-aquarius npm...

Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123505

Malicious code in postcss-magellan-ursa-zenobia npm...

EUVD-2025-120137

Malicious code in yaml-loopback-cors-postcss npm...

EUVD-2025-116175

Malicious code in bellatrix-bulma-postcss-deimos npm...

EUVD-2025-116050

Malicious code in blitz-nodejs-postcss-umbra npm...

Malicious code in postcss-capella-jabbah-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bad8467190852c493002cd67a7360ff1149c14ec334228073775c07a0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112661

Malicious code in hydra-postcss-heka-rigel npm...