EUVD-2025-121386

Malicious code in terser-webpack-plugin-airbnb-test-node-sass npm...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

EUVD-2025-123187

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c75a1f2a4473c3bdad22140daaaab48fb2b8967e39e94cdf6b036285b6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114771

Malicious code in css-minimizer-webpack-plugin-yaml-sails-test npm...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114498

Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede npm...

EUVD-2025-112460

Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository npm...

MAL-2025-148548 Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145489 Malicious code in nightwatch-terser-webpack-plugin-auth-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8330b970ea27a9a8326babaa86a72618b895c2a775a610dbb6a8d80ff93ff11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

EUVD-2025-112908

Malicious code in heka-exec-terser-webpack-plugin-start npm...

EUVD-2025-124764

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149507 Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147094 Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc92c96d3ca99d6166dcc1bfdf45c8e4a21ea3ca0e602f88717aebed70a8c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...