MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145310 Malicious code in nconf-deimos-postcss-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cce33f39643e61e6f6e8ef24989339dfae8ee7032912dd33dfc700f985496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146401 Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122221

Malicious code in schema-zenobia-lint-staged-postcss npm...

Malicious code in xerxes-weywot-eris-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009132446e6de1cf47b905af2f0ffc0bcef9821a4af74b0725341515abc2680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116917

Malicious code in acamar-postcss-eleventy-deneb npm...

EUVD-2025-123541

Malicious code in postcss-await-janus-triton npm...

EUVD-2025-123507

Malicious code in postcss-loader-winston-transport-spinner npm...

Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114442

Malicious code in docusaurus-hyperion-postcss-jwt npm...

EUVD-2025-124257

Malicious code in nova-postcss-loader-nuxtjs-duplex npm...

Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115649

Malicious code in cassini-barnard-postcss-odin npm...

EUVD-2025-120975

Malicious code in uninstall-browserify-ganymede-postcss-loader npm...

EUVD-2025-115582

Malicious code in centauri-configstore-postcss-mutation npm...

EUVD-2025-120710

Malicious code in vuetify-postcss-loader-mongodb-less npm...

EUVD-2025-123496

Malicious code in postcss-xanadu-test-mira npm...

EUVD-2025-115686

Malicious code in carina-postcss-auriga-less npm...