793 matches found
EUVD-2025-178118
Malicious code in levels-await-postcss-comet npm...
Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in development-postcss-loader-webpack-cosmicweb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc7d279a0f29b5bca794be3e6921a4e2c28a76db57e85d79fa4f0cca9313cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177102
Malicious code in postcss-ablation-hercules-darkmatter npm...
EUVD-2025-179178
Malicious code in electron-postcss-loader-yaml-pyxis npm...
EUVD-2025-175577
Malicious code in weywot-astrobiology-biomimicry-postcss npm...
MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188786 Malicious code in postcss-proxima-eris-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b692603a1c9f4a2d03676aef0261fab595983256dab9eb6bb8a15236a866ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187067 Malicious code in fusion-postcss-loader-supercluster-biohacking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dc4a5c17ace9f40ad7f1fd6da92459fd78712491da86cdf24cdb0f3e04ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188371 Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188777 Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed318452e4290638abbef91f54d51d2d2f0ecfc9073c4d399951524680acd6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177100
Malicious code in postcss-development-cosmogenic-mongodb npm...
EUVD-2025-123529
Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...
Malicious code in postcss-loader-pegasus-registry-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112303
Malicious code in janus-firebase-postcss-loader-cygnus npm...
Malicious code in postcss-yaml-lynx-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122221
Malicious code in schema-zenobia-lint-staged-postcss npm...
EUVD-2025-123515
Malicious code in postcss-loader-quito-iota-commitizen npm...
Malicious code in ora-postcss-dotenv-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...