959 matches found
Malicious code in arcturus-toml-carpo-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123504
Malicious code in postcss-neptune-ursa-nextjs npm...
Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123499
Malicious code in postcss-slides-browserify-less-loader npm...
EUVD-2025-114816
Malicious code in csrf-postcss-dependencies-upgrade npm...
EUVD-2025-124040
Malicious code in ora-electron-builder-postcss-umbra npm...
EUVD-2025-123528
Malicious code in postcss-loader-elara-izar-pino-pretty npm...
Malicious code in dactyl-postcss-slidev-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in capella-got-norma-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115649
Malicious code in cassini-barnard-postcss-odin npm...
EUVD-2025-114132
Malicious code in element-ui-postcss-less-elara npm...
Malicious code in ora-postcss-dotenv-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113911
Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...
EUVD-2025-123537
Malicious code in postcss-concurrently-envconfig-meteor npm...
EUVD-2025-123502
Malicious code in postcss-procyon-xanadu-run-script npm...
Malicious code in materialize-farout-postcss-loader-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114626
Malicious code in dagda-repository-postcss-loader-wolf npm...
EUVD-2025-120325
Malicious code in xanadu-postcss-slides-reveal-md npm...