EUVD-2025-115826

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx npm...

EUVD-2025-115805

Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown npm...

EUVD-2025-115702

Malicious code in carina-centaurus-blaze-terser-webpack-plugin npm...

EUVD-2025-115553

Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-115487

Malicious code in chakra-ui-lint-webpack-yildun npm...

EUVD-2025-115392

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...

EUVD-2025-115285

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-116649

Malicious code in antd-dagda-optimize-css-assets-webpack-plugin-remark npm...

EUVD-2025-116622

Malicious code in apex-html-webpack-plugin-configstore-polaris npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-116884

Malicious code in adonis-tool-optimize-css-assets-webpack-plugin-spectron npm...

EUVD-2025-116854

Malicious code in airbnb-antares-terser-webpack-plugin-oauth npm...

EUVD-2025-116786

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146162 Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7758742d6ce3f84c41f899059c9fa2f6d10ec4d81abe2446f4316493355a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143364 Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...