EUVD-2025-113353

Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare npm...

EUVD-2025-121519

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...

EUVD-2025-111726

Malicious code in library-pulsar-mini-css-extract-plugin-init npm...

EUVD-2025-111117

Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...

EUVD-2025-111119

Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged npm...

EUVD-2025-111125

Malicious code in mini-css-extract-plugin-proxima-forever-altair npm...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121337

Malicious code in testcafe-css-loader-uglify-js-tailwindcss npm...

EUVD-2025-112046

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...

EUVD-2025-111664

Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less npm...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124055

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...

EUVD-2025-113422

Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

EUVD-2025-114131

Malicious code in element-ui-prettier-css-loader-elara npm...

EUVD-2025-112820

Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122144

Malicious code in sedna-nightwatch-postcss-loader-mini-css-extract-plugin npm...

Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...