7774 matches found
MAL-2025-145019 Malicious code in miranda-ariel-metalsmith-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edfbaf3006b6027e406e19e8a4d6215add69e23c09a4540decae8c630303be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114799
Malicious code in css-loader-phenomic-phoebe-node-config npm...
EUVD-2025-114776
Malicious code in css-minimizer-webpack-plugin-scripts-procyon-passport npm...
EUVD-2025-114349
Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...
EUVD-2025-111119
Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged npm...
Malicious code in css-loader-soap-elektra-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02bd7db49f120b636f5d8a86022af64e2403f9c6397fdaa301235a9bca6c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141327 Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3695ac089a989128e4b219331d647e5f45cf2b19e34bdf28bb8578d708503fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114712
Malicious code in cypress-css-minimizer-webpack-plugin-webpack-configstore npm...
EUVD-2025-111142
Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer npm...
EUVD-2025-111143
Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...
EUVD-2025-116846
Malicious code in airbnb-janus-uninstall-mini-css-extract-plugin npm...
EUVD-2025-115049
Malicious code in configstore-prettier-css-loader-neptune npm...
MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121519
Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...
EUVD-2025-122757
Malicious code in rehype-css-loader-metalsmith-carina npm...
EUVD-2025-121269
Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...
EUVD-2025-112722
Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124059
Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...