794 matches found
MAL-2025-44122 Malicious code in electron-postcss-io-dynamo (npm)
The package electron-postcss-io-dynamo was found to contain malicious code...
Malicious code in astro-postcss-loader-grunt-selenium (npm)
The package astro-postcss-loader-grunt-selenium was found to contain malicious code...
MAL-2025-45090 Malicious code in magellan-taphonomy-jest-postcss-loader (npm)
The package magellan-taphonomy-jest-postcss-loader was found to contain malicious code...
MAL-2025-45578 Malicious code in postcss-sedna-perturbation-cordelia (npm)
The package postcss-sedna-perturbation-cordelia was found to contain malicious code...
MAL-2025-45540 Malicious code in perseus-changelog-await-postcss (npm)
The package perseus-changelog-await-postcss was found to contain malicious code...
Malicious code in iota-terser-webpack-plugin-hermes-postcss (npm)
The package iota-terser-webpack-plugin-hermes-postcss was found to contain malicious code...
Malicious code in electron-postcss-io-dynamo (npm)
The package electron-postcss-io-dynamo was found to contain malicious code...
An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.
...
Linux Distros Unpatched Vulnerability : CVE-2021-23382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. T...
Linux Distros Unpatched Vulnerability : CVE-2021-23368
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing. CVE-2021-23368 Note tha...
Malicious code in warp-postcss-loader-jest-cosmicsilence (npm)
The package warp-postcss-loader-jest-cosmicsilence was found to contain malicious code...
Malicious code in neptune-tool-postcss-publish (npm)
The package neptune-tool-postcss-publish was found to contain malicious code...
Malicious code in promise-ora-postcss-antares (npm)
The package promise-ora-postcss-antares was found to contain malicious code...
Malicious code in postcss-minify2 (npm)
The package postcss-minify2 was found to contain malicious code...
Malicious code in postcss-minify-browser (npm)
The package postcss-minify-browser was found to contain malicious code...
Malicious code in javascript-nightmare-jekyll-postcss-loader (npm)
The package javascript-nightmare-jekyll-postcss-loader was found to contain malicious code...
Malicious code in elektra-grus-cassini-postcss-loader (npm)
The package elektra-grus-cassini-postcss-loader was found to contain malicious code...
Malicious code in postcss-loader-remark-archaeoastronomy-nconf (npm)
The package postcss-loader-remark-archaeoastronomy-nconf was found to contain malicious code...