EUVD-2025-177561

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin npm...

MAL-2025-190157 Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177910

Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...

EUVD-2025-177574

Malicious code in node-config-mini-css-extract-plugin-bellatrix-update npm...

EUVD-2025-179461

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178004

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...

EUVD-2025-177644

Malicious code in nestjs-css-loader-command-mensa npm...

Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7f5cc9d01824907a5d44dc771cb5aac82e0c1a99d9446c42589fadfa59dad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179328

Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby npm...

EUVD-2025-178416

Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await npm...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

EUVD-2025-180480

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap npm...

EUVD-2025-177832

Malicious code in mini-css-extract-plugin-radiant-axios-sirius npm...

EUVD-2025-178299

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...

EUVD-2025-179462

Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade npm...

EUVD-2025-175468

Malicious code in xo-mini-css-extract-plugin-vega-koa npm...

EUVD-2025-177770

Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius npm...

Malicious code in perturbation-css-loader-loopback-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4684aaffab6d34720deb56993688e53726878270ceb84edaa6fe301f400e81a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...