MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143375 Malicious code in html-webpack-plugin-upgrade-remark-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59399cefad893f72472df77482546ff2e4acbd7f3456d03c6d07554edc9eab8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143358 Malicious code in html-webpack-plugin-csrf-link-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922ca18a44731d301d1740519b17256d39a472601f460a03933bf194565d2642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123297

Malicious code in procyon-wezen-html-webpack-plugin-wezen npm...

EUVD-2025-112748

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...

EUVD-2025-112735

Malicious code in html-webpack-plugin-xenon-gacrux-io npm...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-112739

Malicious code in html-webpack-plugin-sync-perseus-castor npm...

EUVD-2025-116472

Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112751

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore npm...

EUVD-2025-37270

Malicious code in vue2-script-ext-html-webpack-plugin npm...

MAL-2025-49276 Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...

Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47677 Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)

The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code...

Malicious code in neutrino-paleontology-html-webpack-plugin-mui (npm)

The package neutrino-paleontology-html-webpack-plugin-mui was found to contain malicious code...

Malicious code in astro-sagitta-exobiology-html-webpack-plugin (npm)

The package astro-sagitta-exobiology-html-webpack-plugin was found to contain malicious code...