173 matches found
Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113973
Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin npm...
EUVD-2025-112734
Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...
EUVD-2025-115102
Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...
EUVD-2025-123297
Malicious code in procyon-wezen-html-webpack-plugin-wezen npm...
EUVD-2025-120739
Malicious code in vortex-request-websockets-html-webpack-plugin npm...
EUVD-2025-114320
Malicious code in draco-auth-resolvers-html-webpack-plugin npm...
EUVD-2025-114507
Malicious code in despina-octans-metalsmith-html-webpack-plugin npm...
EUVD-2025-123264
Malicious code in promise-yildun-html-webpack-plugin-mocha npm...
Malicious code in html-webpack-plugin-transform-google-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124157
Malicious code in octans-command-html-webpack-plugin-build npm...
EUVD-2025-111785
Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...
EUVD-2025-123327
Malicious code in procyon-html-webpack-plugin-nodemon-phoebe npm...
EUVD-2025-115812
Malicious code in callback-apollo-forever-html-webpack-plugin npm...
EUVD-2025-120948
Malicious code in unuk-iota-zenith-html-webpack-plugin npm...
EUVD-2025-112742
Malicious code in html-webpack-plugin-rigel-heka-gemini npm...
EUVD-2025-112753
Malicious code in html-webpack-plugin-dagda-axios-jest npm...
Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...