EUVD-2025-113048

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112542

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

EUVD-2025-120275

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse npm...

EUVD-2025-124059

Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...

EUVD-2025-124058

Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...

EUVD-2025-124055

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...

EUVD-2025-121314

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114200

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...

EUVD-2025-121269

Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...

EUVD-2025-115261

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112722

Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

EUVD-2025-121822

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-124056

Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145856 Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111229

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev npm...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...