EUVD-2025-176265

Malicious code in spectron-mini-css-extract-plugin-enif-commitizen npm...

EUVD-2025-177574

Malicious code in node-config-mini-css-extract-plugin-bellatrix-update npm...

EUVD-2025-179063

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin npm...

EUVD-2025-178416

Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await npm...

EUVD-2025-177945

Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino npm...

EUVD-2025-180331

Malicious code in ariel-backend-css-loader-aldebaran npm...

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177041

Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...

Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7f5cc9d01824907a5d44dc771cb5aac82e0c1a99d9446c42589fadfa59dad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175648

Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos npm...

EUVD-2025-177770

Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius npm...

Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175628

Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...

EUVD-2025-177561

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin npm...

Malicious code in mira-fusion-yildun-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-css-loader-command-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadc9bae2c451c458228c585830c85a5ab63f5a358e31b3de37b61fa252b4550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179818

Malicious code in centaurus-neptune-css-loader-lynx npm...

EUVD-2025-177432

Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...

EUVD-2025-175467

Malicious code in xo-morgan-css-loader-prompts npm...

Malicious code in perturbation-css-loader-loopback-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4684aaffab6d34720deb56993688e53726878270ceb84edaa6fe301f400e81a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...