MAL-2025-186074 Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176958

Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin npm...

EUVD-2025-179393

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...

EUVD-2025-178506

Malicious code in html-webpack-plugin-promise-meteor-dactyl npm...

EUVD-2025-179869

Malicious code in cassini-html-webpack-plugin-loglevel-jest npm...

EUVD-2025-178510

Malicious code in html-webpack-plugin-atlas-global-lacerta npm...

Malicious code in ariel-markdown-arcturus-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f906563d9aed4a7980a31a32bfc6ae14daf13ed46d446a279c6169602dc258e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177418

Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...

MAL-2025-190289 Malicious code in webpack-exec-adonis-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857c1b3d5dd82954dd7c80c0e8fe57793032b251a6480c942c336ce83d6b774f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185824 Malicious code in biomimicry-epigenetics-rimraf-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99d6b16ce5f9ad8a4b63643f29ff2a163289920ad64bab9677fc22fda67ddb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187815 Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03253bd76fedc24d55504b970d032ee47ad508a341ba8a5531490b0b9ae15ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177770

Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius npm...

EUVD-2025-179354

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin npm...

EUVD-2025-179129

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver npm...

EUVD-2025-179595

Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin npm...

EUVD-2025-179458

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private npm...

EUVD-2025-176004

Malicious code in terser-webpack-plugin-canopus-troposphere-ichnology npm...

EUVD-2025-178483

Malicious code in hydra-helmet-terser-webpack-plugin-ignite npm...

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180170

Malicious code in axios-astro-html-webpack-plugin-algol npm...