6222 matches found
EUVD-2025-121650
Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...
EUVD-2025-123321
Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...
EUVD-2025-123104
Malicious code in publish-taurus-css-loader-mensa npm...
EUVD-2025-124051
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql npm...
EUVD-2025-121763
Malicious code in spica-jovian-norma-css-loader npm...
EUVD-2025-114790
Malicious code in css-loader-terser-rimraf-lyra npm...
EUVD-2025-122197
Malicious code in scripts-blaze-css-loader-venus npm...
EUVD-2025-113313
Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader npm...
Malicious code in mini-css-extract-plugin-callisto-vulcan-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fefa2b8aac08eb3db27624e6a94ba26bdf920229211f6b3eeda2ce26bd6c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111864
Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...
EUVD-2025-123880
Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin npm...
EUVD-2025-114776
Malicious code in css-minimizer-webpack-plugin-scripts-procyon-passport npm...
EUVD-2025-114789
Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict npm...
EUVD-2025-116198
Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...
EUVD-2025-111140
Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...
EUVD-2025-121917
Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...
EUVD-2025-113349
Malicious code in gacrux-dagda-koa-css-loader npm...
Malicious code in local-galaxy-css-loader-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...