6220 matches found
MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142838 Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3d7c7613ca3b24203a1a6b67a092b1b7c05ab67e78b886ed6158382f56e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142759 Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8b4a91227e773e130eae13bfb68e4884b8fad2f307cf3ea714f2a8819940e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144485 Malicious code in local-css-loader-ursa-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d53f49874e4864e74dfa98d9d5a9d4aab907c412463f74c6247ac80cd5a0c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141300 Malicious code in css-loader-cygnus-restart-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141604 Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146349 Malicious code in polaris-jabbah-hermes-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89da1dae41a7ae32c18eca5e6979e685dd654c9c55d76cee9c556388ceaa2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142098 Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cfcb545559f2996c7f4a71f9a4e7d0a08c42e31a731215a45e3910b4edabdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123793
Malicious code in phenomic-css-minimizer-webpack-plugin-titan-vulcan npm...
EUVD-2025-114953
Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...
EUVD-2025-116932
Malicious code in acamar-css-loader-style-loader-readable npm...
EUVD-2025-120645
Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli npm...
EUVD-2025-111726
Malicious code in library-pulsar-mini-css-extract-plugin-init npm...