EUVD-2025-113119

Malicious code in got-ursa-css-minimizer-webpack-plugin-redis npm...

EUVD-2025-112434

Malicious code in install-mini-css-extract-plugin-test-sqlite npm...

EUVD-2025-111124

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

EUVD-2025-115491

Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver npm...

EUVD-2025-116342

Malicious code in auth0-weywot-colors-css-loader npm...

EUVD-2025-124050

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...

MAL-2025-142759 Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8b4a91227e773e130eae13bfb68e4884b8fad2f307cf3ea714f2a8819940e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120169

Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...

EUVD-2025-123133

Malicious code in publish-impulse-package-css-minimizer-webpack-plugin npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

EUVD-2025-124057

Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius npm...

EUVD-2025-111125

Malicious code in mini-css-extract-plugin-proxima-forever-altair npm...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112709

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...

EUVD-2025-124058

Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...

EUVD-2025-122693

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...

MAL-2025-141309 Malicious code in css-loader-octans-acamar-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...