EUVD-2025-111423

Malicious code in markdown-pdf-ganymede-miranda-postcss npm...

EUVD-2025-114816

Malicious code in csrf-postcss-dependencies-upgrade npm...

EUVD-2025-115505

Malicious code in chai-procyon-postcss-loader-forever npm...

EUVD-2025-123817

Malicious code in perseus-postcss-loader-janus-gacrux npm...

EUVD-2025-113459

Malicious code in fornax-selenium-postcss-loader-middleware npm...

EUVD-2025-120102

Malicious code in yonder-altair-commitlint-config-angular-postcss npm...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123502

Malicious code in postcss-procyon-xanadu-run-script npm...

Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124598

Malicious code in nconf-nodemon-start-postcss npm...

EUVD-2025-123503

Malicious code in postcss-postcss-package-impulse npm...

Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-farout-postcss-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123534

Malicious code in postcss-eslint-semantic-ui-metalsmith npm...

EUVD-2025-113004

Malicious code in grus-vulcan-postcss-terser npm...

EUVD-2025-115223

Malicious code in comet-parcel-perseus-postcss-loader npm...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-rocket-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...