668 matches found
MAL-2025-145489 Malicious code in nightwatch-terser-webpack-plugin-auth-callisto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8330b970ea27a9a8326babaa86a72618b895c2a775a610dbb6a8d80ff93ff11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146635 Malicious code in promise-cressida-link-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55087f73e61906bf5e0de5f431ab2561dc61d4dc847696b9b09fb2b7b812ef23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143356 Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116279
Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios npm...
EUVD-2025-114740
Malicious code in cygnus-html-webpack-plugin-convict-sagitta npm...
EUVD-2025-111725
Malicious code in library-quasar-andromeda-terser-webpack-plugin npm...
EUVD-2025-114866
Malicious code in cressida-sequelize-wolf-terser-webpack-plugin npm...
EUVD-2025-123177
Malicious code in proxima-terser-webpack-plugin-materialize-rollup npm...
Malicious code in protractor-europa-elektra-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5bff1274211f71d47aa49ddd63a8fb1fbe41e40c6e328bc1c8572c8cfc4c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120668
Malicious code in warp-avior-html-webpack-plugin-webpack npm...
EUVD-2025-115432
Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport npm...
EUVD-2025-124310
Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...
EUVD-2025-124059
Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...
EUVD-2025-123441
Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin npm...
EUVD-2025-115553
Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin npm...
EUVD-2025-122162
Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint npm...
EUVD-2025-112564
Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna npm...