MAL-2025-146380 Malicious code in postcss-await-janus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f95e8dca9374bd68093ca7b66d2bc1f9fe8b85ed4d42fe457323a52534de0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144598 Malicious code in lynx-parcel-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a81e296bc597462543d7c7356b81d22d0bd5ba481700455ce5e90096884655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113030

Malicious code in grus-avior-sirius-postcss npm...

MAL-2025-142179 Malicious code in eris-postcss-meissa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27bcabfaaa9e19e794765c57eb2a14c626c0f10f9a9c0753116c47fdae89bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124040

Malicious code in ora-electron-builder-postcss-umbra npm...

EUVD-2025-112303

Malicious code in janus-firebase-postcss-loader-cygnus npm...

EUVD-2025-121730

Malicious code in spinner-fomalhaut-postcss-loader-private npm...

EUVD-2025-123539

Malicious code in postcss-chalk-cassini-hugo npm...

MAL-2025-139588 Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149102 Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141483 Malicious code in dagda-repository-postcss-loader-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b212ae5f985d7c18d311a6ab321a2d2732144636d494c2f7fc71552707ecbcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

EUVD-2025-115223

Malicious code in comet-parcel-perseus-postcss-loader npm...

EUVD-2025-114161

Malicious code in elektra-link-postcss-loader-cordelia npm...

EUVD-2025-123511

Malicious code in postcss-loader-slidev-gulp-bellatrix npm...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146383 Malicious code in postcss-charon-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef6d8dafaa116a5ca64bdb2c40c47a42b8d292a31ce2ea6825553b57b0690c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146402 Malicious code in postcss-loader-nightwatch-hugo-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4beacd28628662157313c1228b2e5d2f837b744c07aa98fb2107f178cad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...