MAL-2025-22752 Malicious code in html-webpack-plugin-odin-jest-transform (npm)

The package html-webpack-plugin-odin-jest-transform was found to contain malicious code...

MAL-2025-14802 Malicious code in arcturus-brane-test-html-webpack-plugin (npm)

The package arcturus-brane-test-html-webpack-plugin was found to contain malicious code...

MAL-2025-30820 Malicious code in publish-link-sedna-html-webpack-plugin (npm)

The package publish-link-sedna-html-webpack-plugin was found to contain malicious code...

MAL-2025-26998 Malicious code in mysql-html-webpack-plugin-janus-pegasus (npm)

The package mysql-html-webpack-plugin-janus-pegasus was found to contain malicious code...

MAL-2025-22753 Malicious code in html-webpack-plugin-panspermia-local-tachyon (npm)

The package html-webpack-plugin-panspermia-local-tachyon was found to contain malicious code...

MAL-2025-17200 Malicious code in cluster-nextjs-html-webpack-plugin-scripts (npm)

The package cluster-nextjs-html-webpack-plugin-scripts was found to contain malicious code...

MAL-2025-15203 Malicious code in avior-chai-html-webpack-plugin-pegasus (npm)

The package avior-chai-html-webpack-plugin-pegasus was found to contain malicious code...

MAL-2025-19737 Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)

The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code...

MAL-2025-17421 Malicious code in commitlint-mutation-tectonic-html-webpack-plugin (npm)

The package commitlint-mutation-tectonic-html-webpack-plugin was found to contain malicious code...

MAL-2025-18648 Malicious code in dorado-html-webpack-plugin-less-procyon (npm)

The package dorado-html-webpack-plugin-less-procyon was found to contain malicious code...

Malware in html-webpack-plugin-v4

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in html-webpack-plugin-v5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in html-webpack-plugin-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

MAL-2025-1038 Malicious code in html-webpack-plugin-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...

MAL-2025-1039 Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...