2033 matches found
EUVD-2025-111468
Malicious code in magellan-meissa-mini-css-extract-plugin-dorado npm...
EUVD-2025-111117
Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...
EUVD-2025-113208
Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar npm...
EUVD-2025-111135
Malicious code in mini-css-extract-plugin-meteor-capella-nconf npm...
EUVD-2025-115321
Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...
EUVD-2025-111121
Malicious code in mini-css-extract-plugin-sedna-fetch-adonis npm...
MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120684
Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat npm...
EUVD-2025-111122
Malicious code in mini-css-extract-plugin-release-it-antares-rollup npm...
EUVD-2025-111936
Malicious code in kinetic-mini-css-extract-plugin-winston-spectron npm...
EUVD-2025-120573
Malicious code in webdriver-mocha-mini-css-extract-plugin-acamar-magellan npm...
EUVD-2025-111129
Malicious code in mini-css-extract-plugin-passport-centaurus-eslint-plugin npm...
EUVD-2025-111119
Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged npm...
EUVD-2025-124672
Malicious code in mysql-firebase-websockets-mini-css-extract-plugin npm...
EUVD-2025-113102
Malicious code in graphql-transport-umbriel-mini-css-extract-plugin npm...
EUVD-2025-112721
Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...
EUVD-2025-112708
Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...
EUVD-2025-114349
Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...
MAL-2025-144997 Malicious code in mini-css-extract-plugin-taurus-kastra-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0ba0fec30c09bfc4ffa84020c6073f6557695591ee4f30f607a8ab23ac89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...