EUVD-2025-123104

Malicious code in publish-taurus-css-loader-mensa npm...

EUVD-2025-121677

Malicious code in standard-aquarius-css-loader-webdriver-mocha npm...

EUVD-2025-124056

Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114012

Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo npm...

EUVD-2025-121961

Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel npm...

EUVD-2025-124063

Malicious code in optimize-css-assets-webpack-plugin-cli-gatsby-aether npm...

EUVD-2025-111468

Malicious code in magellan-meissa-mini-css-extract-plugin-dorado npm...

EUVD-2025-112083

Malicious code in juno-loopback-tailwindcss-blitz npm...

EUVD-2025-114778

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...

EUVD-2025-114800

Malicious code in css-loader-octans-acamar-colors npm...

EUVD-2025-122515

Malicious code in reveal-md-flare-kastra-css-loader npm...

EUVD-2025-121980

Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex npm...

EUVD-2025-124854

Malicious code in miranda-yonder-css-loader-hercules npm...

EUVD-2025-121941

Malicious code in slides-css-loader-callisto-server npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

EUVD-2025-120129

Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...

EUVD-2025-122985

Malicious code in quark-sass-loader-tethys-css-loader npm...

EUVD-2025-111513

Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda npm...

Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0da98e288028234148488a2f636cdb4fc065991d201ef07a51cd9f0f2ae7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...