7830 matches found
MAL-2025-144970 Malicious code in mini-css-extract-plugin-capella-lacerta-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b5bc74934a8bac1cf36c483b27d6fbdb0ad09d79f4471cbac2695209ecf5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113605
Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...
MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144997 Malicious code in mini-css-extract-plugin-taurus-kastra-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0ba0fec30c09bfc4ffa84020c6073f6557695591ee4f30f607a8ab23ac89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122694
Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin npm...
MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121314
Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...
MAL-2025-142024 Malicious code in enceladus-css-loader-nuxtjs-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483e9bf65770e7a71f5e4ead851865362008112e6ac859753ed4775f66af56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112460
Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository npm...
EUVD-2025-114706
Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel npm...
EUVD-2025-115404
Malicious code in chariklo-mini-css-extract-plugin-rollup-google npm...
Malicious code in io-hercules-css-loader-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114105
Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware npm...
EUVD-2025-121574
Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx npm...
EUVD-2025-111229
Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev npm...
EUVD-2025-111138
Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright npm...
EUVD-2025-122693
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...
EUVD-2025-115491
Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver npm...