EUVD-2025-112736

Malicious code in html-webpack-plugin-wasat-fornax-eris npm...

EUVD-2025-114320

Malicious code in draco-auth-resolvers-html-webpack-plugin npm...

EUVD-2025-112749

Malicious code in html-webpack-plugin-hercules-aldebaran-electron npm...

EUVD-2025-113048

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122920

Malicious code in quito-request-karma-html-webpack-plugin npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

EUVD-2025-111551

Malicious code in loopback-server-grunt-terser-webpack-plugin npm...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-123327

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe npm...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

EUVD-2025-116472

Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

EUVD-2025-114123

Malicious code in element-ui-winston-html-webpack-plugin-npm npm...

EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112143

Malicious code in json-development-publish-terser-webpack-plugin npm...

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c75a1f2a4473c3bdad22140daaaab48fb2b8967e39e94cdf6b036285b6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113087

Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin npm...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...