EUVD-2025-115686

Malicious code in carina-postcss-auriga-less npm...

EUVD-2025-115825

Malicious code in cache-postcss-phoebe-xenos npm...

EUVD-2025-123509

Malicious code in postcss-loader-telesto-vulcan-phenomic npm...

EUVD-2025-114701

Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...

Malicious code in postcss-postcss-package-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808dfa2a9e301a31de471bb99a322bb7a4f31937ab1e579f9a02a33d25e30287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-123532

Malicious code in postcss-loader-child-process-element-ui-weywot npm...

EUVD-2025-114442

Malicious code in docusaurus-hyperion-postcss-jwt npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

EUVD-2025-124257

Malicious code in nova-postcss-loader-nuxtjs-duplex npm...

EUVD-2025-112385

Malicious code in iota-iota-avior-postcss-loader npm...

EUVD-2025-124538

Malicious code in neptune-stream-toml-postcss-loader npm...

Malicious code in sedna-postcss-gravity-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123654

Malicious code in pipe-query-puppeteer-postcss npm...

EUVD-2025-111517

Malicious code in lynx-parcel-telesto-postcss npm...

EUVD-2025-114389

Malicious code in dotenv-parse-variables-eris-xenon-postcss npm...

Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...