EUVD-2025-112708

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-116048

Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin npm...

EUVD-2025-113517

Malicious code in fork-publish-node-config-mini-css-extract-plugin npm...

EUVD-2025-112721

Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149762 Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302087986235bd39e060db5a14525c740168f2e57d7920582b9991970f2ade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141327 Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3695ac089a989128e4b219331d647e5f45cf2b19e34bdf28bb8578d708503fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143653 Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6e103bdf6239a1f4ae1ea1b859a0de9a6bbafe30cb680fe33b95e1adacff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-css-loader-command-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-121519

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...

EUVD-2025-120998

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...

EUVD-2025-111277

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...

EUVD-2025-121269

Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...

EUVD-2025-122398

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...

MAL-2025-141310 Malicious code in css-loader-phenomic-phoebe-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd1ff25e1d1dab0ec49a40130c27cf086276094946c1578b49eb29788edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...