EUVD-2025-115747

Malicious code in canopus-hermes-postcss-loader-xanthus npm...

EUVD-2025-122254

Malicious code in sass-loader-gatsby-chariklo-postcss-loader npm...

EUVD-2025-111191

Malicious code in meteor-postcss-galaxy-markdown npm...

EUVD-2025-120207

Malicious code in xerxes-weywot-eris-postcss npm...

Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122226

Malicious code in schema-init-cosmiconfig-postcss-loader npm...

EUVD-2025-123517

Malicious code in postcss-loader-oauth-chai-miranda npm...

EUVD-2025-123513

Malicious code in postcss-loader-scorpius-centaurus-farout npm...

EUVD-2025-123520

Malicious code in postcss-loader-mutation-command-procyon npm...

Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122136

Malicious code in sedna-postcss-gravity-lacerta npm...

EUVD-2025-122392

Malicious code in rollup-postcss-loader-xanadu-relay npm...

Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123505

Malicious code in postcss-magellan-ursa-zenobia npm...

EUVD-2025-114688

Malicious code in cz-conventional-changelog-json-postcss-babel npm...

EUVD-2025-114895

Malicious code in cosmos-postcss-loader-iota-eslint-config npm...

Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...

Malicious code in atlas-neptune-postcss-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3642a23ed879e58d8e6a28ce1fe2b4842279d353ee9f22be6c766e7a10de4b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...