Malicious code in development-postcss-loader-webpack-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc7d279a0f29b5bca794be3e6921a4e2c28a76db57e85d79fa4f0cca9313cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179302

Malicious code in development-postcss-loader-webpack-cosmicweb npm...

EUVD-2025-177099

Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy npm...

EUVD-2025-180283

Malicious code in astrometry-postcss-loader-mineralogy-uninstall npm...

EUVD-2025-177093

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy npm...

EUVD-2025-177096

Malicious code in postcss-loader-ganymede-metalsmith-farout npm...

MAL-2025-188786 Malicious code in postcss-proxima-eris-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b692603a1c9f4a2d03676aef0261fab595983256dab9eb6bb8a15236a866ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175577

Malicious code in weywot-astrobiology-biomimicry-postcss npm...

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188777 Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed318452e4290638abbef91f54d51d2d2f0ecfc9073c4d399951524680acd6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187067 Malicious code in fusion-postcss-loader-supercluster-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dc4a5c17ace9f40ad7f1fd6da92459fd78712491da86cdf24cdb0f3e04ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188371 Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122221

Malicious code in schema-zenobia-lint-staged-postcss npm...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-style-loader-foundation-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7af3a5be712e0cae8587eeca54d8551aab41011790b2cadb628fd9c4e66952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-postcss-uninstall-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965478c6b9162d383cd0ae40f14f30f3ff3dca22509b4bec5ce74b6e12f15ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

EUVD-2025-121695

Malicious code in sqlite-jabbah-cross-env-postcss-loader npm...

Malicious code in enif-postcss-winston-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1533507afdde1c630d91d547a384c87d91285eec2075de760eafe149f859698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...