MAL-2025-143364 Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149190 Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120668

Malicious code in warp-avior-html-webpack-plugin-webpack npm...

EUVD-2025-122472

Malicious code in rimraf-izar-html-webpack-plugin-rigel npm...

EUVD-2025-116472

Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...

EUVD-2025-112751

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore npm...

EUVD-2025-123405

Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin npm...

EUVD-2025-112747

Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

EUVD-2025-112745

Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...

EUVD-2025-120948

Malicious code in unuk-iota-zenith-html-webpack-plugin npm...

EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

EUVD-2025-124445

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...

EUVD-2025-116106

Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk npm...

EUVD-2025-113571

Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin npm...

EUVD-2025-112753

Malicious code in html-webpack-plugin-dagda-axios-jest npm...

EUVD-2025-120739

Malicious code in vortex-request-websockets-html-webpack-plugin npm...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...