Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-5837
  • npm/postcss-minify-selector
Malicious code in postcss-minify-selector (npm) 15 Jun
  • No fix available
MAL-2026-5737
  • npm/postcss-minify-selector-parser
Malicious code in postcss-minify-selector-parser (npm) 13 Jun
  • No fix available
GHSA-qx2v-qp2m-jg93
  • npm/postcss
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 24 Apr
  • Fix available
  • Severity - 6.1 (Medium)
MAL-2026-1822
  • npm/postcss-hotfix
Malicious code in postcss-hotfix (npm) 18 Mar
  • No fix available
MAL-2025-185605
  • npm/astrometry-postcss-loader-mineralogy-uninstall
Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm) 13 Nov 2025
  • No fix available
MAL-2025-185700
  • npm/await-supercluster-prosthetics-postcss-loader
Malicious code in await-supercluster-prosthetics-postcss-loader (npm) 13 Nov 2025
  • No fix available
MAL-2025-186205
  • npm/colors-nightwatch-antimatter-postcss-loader
Malicious code in colors-nightwatch-antimatter-postcss-loader (npm) 13 Nov 2025
  • No fix available
MAL-2025-186526
  • npm/delphinus-miranda-postcss-loader-chariklo
Malicious code in delphinus-miranda-postcss-loader-chariklo (npm) 13 Nov 2025
  • No fix available
MAL-2025-186580
  • npm/development-postcss-loader-webpack-cosmicweb
Malicious code in development-postcss-loader-webpack-cosmicweb (npm) 13 Nov 2025
  • No fix available
MAL-2025-186606
  • npm/dorado-hexo-sqlite-postcss-loader
Malicious code in dorado-hexo-sqlite-postcss-loader (npm) 13 Nov 2025
  • No fix available
MAL-2025-186625
  • npm/dotenv-safe-pino-pretty-terser-postcss
Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm) 13 Nov 2025
  • No fix available
MAL-2025-186704
  • npm/electron-postcss-loader-yaml-pyxis
Malicious code in electron-postcss-loader-yaml-pyxis (npm) 13 Nov 2025
  • No fix available
MAL-2025-186851
  • npm/eslint-postcss-loader-pm2-cressida
Malicious code in eslint-postcss-loader-pm2-cressida (npm) 13 Nov 2025
  • No fix available
MAL-2025-187009
  • npm/forever-cygnus-postcss-jwt
Malicious code in forever-cygnus-postcss-jwt (npm) 13 Nov 2025
  • No fix available
MAL-2025-187067
  • npm/fusion-postcss-loader-supercluster-biohacking
Malicious code in fusion-postcss-loader-supercluster-biohacking (npm) 13 Nov 2025
  • No fix available
MAL-2025-187083
  • npm/gacrux-figures-postcss-fornax
Malicious code in gacrux-figures-postcss-fornax (npm) 13 Nov 2025
  • No fix available