8387 matches found
MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141608 Malicious code in despina-regulus-css-loader-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1aab80e4cce0b81ff5effcff1de0ccec604fd14553e05141f232ef3aa99ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149762 Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302087986235bd39e060db5a14525c740168f2e57d7920582b9991970f2ade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141300 Malicious code in css-loader-cygnus-restart-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146349 Malicious code in polaris-jabbah-hermes-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89da1dae41a7ae32c18eca5e6979e685dd654c9c55d76cee9c556388ceaa2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141310 Malicious code in css-loader-phenomic-phoebe-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd1ff25e1d1dab0ec49a40130c27cf086276094946c1578b49eb29788edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141307 Malicious code in css-loader-metalsmith-rest-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005841e6161cc0f0146a62615f6eae5c47197caabf44e0ba61f55a86dabe8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142098 Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cfcb545559f2996c7f4a71f9a4e7d0a08c42e31a731215a45e3910b4edabdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141335 Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e5940c3692e0184723af4b60b6ab2fc2f47716e729018664d180a463eb807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146013 Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143312 Malicious code in hermes-css-loader-request-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141331 Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120275
Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse npm...
EUVD-2025-120169
Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...
EUVD-2025-120129
Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...
EUVD-2025-121101
Malicious code in triton-scripts-cygnus-css-loader npm...
EUVD-2025-121086
Malicious code in typeorm-css-loader-draco-docusaurus npm...