postcss-minify-selector-parser

MAL-2026-5737

npmtyposquat6/13/2026
Description

Malicious code in postcss-minify-selector-parser (npm)

Indicators of Compromise
SHA256 Hashes (18)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Ecosystemnpm
Attack Typetyposquat
Published6/13/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001