EUVD-2025-120169

Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...

EUVD-2025-123133

Malicious code in publish-impulse-package-css-minimizer-webpack-plugin npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

EUVD-2025-124057

Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius npm...

EUVD-2025-111125

Malicious code in mini-css-extract-plugin-proxima-forever-altair npm...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112709

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...

EUVD-2025-124058

Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...

MAL-2025-141309 Malicious code in css-loader-octans-acamar-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111664

Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less npm...

EUVD-2025-121773

Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local npm...

EUVD-2025-111415

Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149228 Malicious code in vulcan-css-loader-command-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121583

Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...

EUVD-2025-114517

Malicious code in despina-css-loader-update-ganymede npm...

EUVD-2025-112046

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...

EUVD-2025-124062

Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon npm...

MAL-2025-144970 Malicious code in mini-css-extract-plugin-capella-lacerta-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b5bc74934a8bac1cf36c483b27d6fbdb0ad09d79f4471cbac2695209ecf5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...