EUVD-2025-116786

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...

EUVD-2025-120084

Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...

EUVD-2025-114847

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...

EUVD-2025-111210

Malicious code in meteor-corvus-heka-terser-webpack-plugin npm...

Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121574

Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx npm...

EUVD-2025-114780

Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss npm...

EUVD-2025-112741

Malicious code in html-webpack-plugin-sedna-css-loader-nebula npm...

Malicious code in terser-webpack-plugin-csv-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2dba0f2f9be6ad4f163dc677a2d1d35025a99545cda5729227a326971c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111864

Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...

EUVD-2025-123928

Malicious code in pavo-buffer-terser-webpack-plugin-nightmare npm...

EUVD-2025-124556

Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...

EUVD-2025-113973

Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin npm...

EUVD-2025-112747

Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus npm...

EUVD-2025-111185

Malicious code in meteor-registry-html-webpack-plugin-gravity npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

EUVD-2025-123297

Malicious code in procyon-wezen-html-webpack-plugin-wezen npm...

EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

EUVD-2025-112745

Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...