EUVD-2025-111143

Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...

EUVD-2025-112713

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-120684

Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat npm...

EUVD-2025-124899

Malicious code in miranda-ariel-metalsmith-css-loader npm...

EUVD-2025-113606

Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic npm...

EUVD-2025-113087

Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin npm...

EUVD-2025-111144

Malicious code in mini-css-extract-plugin-cli-quasar-cache npm...

EUVD-2025-113633

Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...

EUVD-2025-116403

Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin npm...

EUVD-2025-122956

Malicious code in query-despina-css-minimizer-webpack-plugin-juno npm...

Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123908

Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

EUVD-2025-114778

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...

EUVD-2025-111117

Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-112544

Malicious code in indus-mini-css-extract-plugin-mysql-jupiter npm...

Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112812

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe npm...

Malicious code in gacrux-dagda-koa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5ee59e11ee829934c641c5b26806bcec0bca1048843e128d64e3bfd3ef67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...