EUVD-2025-178873

Malicious code in forever-cygnus-postcss-jwt npm...

EUVD-2025-177092

Malicious code in postcss-loader-prosthetics-loopback-javascript npm...

EUVD-2025-179677

Malicious code in colors-nightwatch-antimatter-postcss-loader npm...

Malicious code in holography-hercules-janus-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0747bbcd6e1cb7fbbcd0dc7b214cd578ce9437437d5ff92c3122cd217d7f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179031

Malicious code in eslint-postcss-loader-pm2-cressida npm...

EUVD-2025-177011

Malicious code in promise-umbra-css-loader-postcss-loader npm...

EUVD-2025-175820

Malicious code in uninstall-semantic-ui-await-postcss npm...

EUVD-2025-175975

Malicious code in testcafe-postcss-europa-atlas npm...

Malicious code in nestjs-postcss-loader-slides-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d6caff4f79bd4c2162390fa99edba8f8844e4ae965bc0081adee88785b282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176493

Malicious code in scorpius-vulcan-postcss-loader-centauri npm...

EUVD-2025-178184

Malicious code in koa-callback-postcss-loader-webdriver-manager npm...

EUVD-2025-179356

Malicious code in delphinus-miranda-postcss-loader-chariklo npm...

EUVD-2025-179257

Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c4ee8a47b6f72647c164486538c1d1765edb3e08b84f85ff8f0e12991b0634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177364

Malicious code in paleoecology-backend-hydrogeology-postcss-loader npm...

EUVD-2025-177094

Malicious code in postcss-loader-install-thuban-pipe npm...

EUVD-2025-178294

Malicious code in jasmine-iota-apollo-postcss npm...

EUVD-2025-176009

Malicious code in terser-postcss-loader-bunyan-celeste npm...

MAL-2025-189025 Malicious code in quark-postcss-soap-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ab6eb7fe1ae8807a5143e9fe44dc0700539f225b246bea505b8b47fe4081da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...