EUVD-2025-178510

Malicious code in html-webpack-plugin-atlas-global-lacerta npm...

EUVD-2025-121920

Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

MAL-2025-143365 Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bdd909093acd269050ee6c34672fc6bcb6d1f7880dc777e24bb979bea04124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124556

Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

EUVD-2025-120948

Malicious code in unuk-iota-zenith-html-webpack-plugin npm...

EUVD-2025-113571

Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin npm...

EUVD-2025-120668

Malicious code in warp-avior-html-webpack-plugin-webpack npm...

EUVD-2025-112733

Malicious code in html-webpack-plugin-zenobia-terser-sqlite npm...

EUVD-2025-112755

Malicious code in html-webpack-plugin-cache-spawn-jovian npm...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112735

Malicious code in html-webpack-plugin-xenon-gacrux-io npm...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-116868

Malicious code in aether-mysql-eslint-config-html-webpack-plugin npm...

EUVD-2025-112747

Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus npm...

EUVD-2025-112737

Malicious code in html-webpack-plugin-upgrade-remark-enceladus npm...