8389 matches found
MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112713
Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124050
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...
EUVD-2025-120543
Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...
EUVD-2025-112708
Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...
EUVD-2025-112525
Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...
Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114794
Malicious code in css-loader-reveal-md-non-blocking-nightwatch npm...
EUVD-2025-112709
Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...
Malicious code in triton-scripts-cygnus-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113250
Malicious code in geckodriver-css-loader-transform-cli npm...
MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123141
Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket npm...
EUVD-2025-111508
Malicious code in lyra-eleventy-phenomic-css-loader npm...
EUVD-2025-120998
Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...
EUVD-2025-114809
Malicious code in css-loader-cygnus-restart-cluster npm...