Lucene search
+L

937 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•7 views

Malicious code in chromedriver-css-minimizer-webpack-plugin-petrology-on (npm)

The package chromedriver-css-minimizer-webpack-plugin-petrology-on was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•9 views

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 3693f28f8bd18b96b7dfb6dc284c2aa7df716c48b276888bd6a294330f285276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•6 views

Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•7 views

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector 133334c5bcc682926745fc752255a3c1e4da48e8c1e07925a14d0f505ea7526d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•6 views

Malicious code in chakra-ui-gatsby-terser-webpack-plugin-gulp (npm)

Source: amazon-inspector 7155735cc7a74b1699670cdfed221d3534cc08d4b44a375b725841b1ddf47ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•7 views

Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•5 views

Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•7 views

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•5 views

Malicious code in centaurus-scripts-gulp-terser-webpack-plugin (npm)

Source: amazon-inspector 27023d9210002e8a159d274507e19749d15b77741058b139d23b3f39f719fa99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•4 views

Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm)

Source: amazon-inspector 4f90a93fb08acfd5f7fa33fa6b6f7fc638d17fe538b4201be97e4fd9c7c056b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•6 views

Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector f837f351f411dbd9ba14f5048c27f41b8ff221f3d7ebfb2b720b4aef68c1c6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•6 views

Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini (npm)

Source: amazon-inspector d248cf7f501c1463ad28cd977a126d93aa084780b79e789cd9a7e12c51f38449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•6 views

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa (npm)

Source: amazon-inspector 1870c7f6969ea7f977b1d82de36603569644e0ace11ba6eb516e75c0cfa8893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•5 views

Malicious code in cassini-uglify-js-terser-webpack-plugin-request (npm)

Source: amazon-inspector 21ce09785669244e7591203f571d73f65427bc99ebccda71d751eb0a498be0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•5 views

Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)

Source: amazon-inspector 3c9033f1763d5ba00b031a7c88ae9daa1fa6d813e089bdadca8c7150998d3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•18 views

Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm)

Source: amazon-inspector 2a4d26d4873796782551905789c7fd81ed92473600d7d9e682e8a4f349c24e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•5 views

Malicious code in carina-wasat-css-minimizer-webpack-plugin-paleoclimatology (npm)

The package carina-wasat-css-minimizer-webpack-plugin-paleoclimatology was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•3 views

Malicious code in carina-centaurus-blaze-terser-webpack-plugin (npm)

Source: amazon-inspector 5a7981197a713419d5823cbf101b5139b2e460dcd1918363456293acc722e104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•5 views

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:12 a.m.•4 views

Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector ddbac68d4f0a154017bcea876cdc1a0d580ceef45d587eea1cead61d4448378d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder