EUVD-2025-121451

Malicious code in taurus-postcss-carpo-unuk npm...

Malicious code in xenos-zenobia-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e93a1b3cd01471b7d9b6c197d2d94f92723d90c6139fdfcd7711637980504d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121105

Malicious code in triton-phoebe-lint-staged-postcss npm...

EUVD-2025-116500

Malicious code in astro-enceladus-postcss-loader-iota npm...

Malicious code in xerxes-weywot-eris-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009132446e6de1cf47b905af2f0ffc0bcef9821a4af74b0725341515abc2680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123533

Malicious code in postcss-google-prompts-commitizen npm...

EUVD-2025-116062

Malicious code in blitz-cressida-cross-env-postcss npm...

EUVD-2025-120113

Malicious code in yildun-postcss-meteor-unuk npm...

EUVD-2025-111828

Malicious code in leda-pino-pretty-command-postcss npm...

EUVD-2025-122167

Malicious code in sedna-carpo-command-postcss-loader npm...

EUVD-2025-124515

Malicious code in nestjs-terser-postcss-loader-await npm...

Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114660

Malicious code in dactyl-postcss-slidev-phoebe npm...

EUVD-2025-122713

Malicious code in relay-sails-postcss-quito npm...

Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120234

Malicious code in xenos-zenobia-postcss-janus npm...

Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...