EUVD-2025-124095

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...

EUVD-2025-112820

Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin npm...

EUVD-2025-113796

Malicious code in event-html-webpack-plugin-json-sqlite npm...

EUVD-2025-122472

Malicious code in rimraf-izar-html-webpack-plugin-rigel npm...

EUVD-2025-124502

Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify npm...

EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123405

Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...

EUVD-2025-120543

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...

EUVD-2025-124050

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...

EUVD-2025-112709

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...

EUVD-2025-115528

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114785

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda npm...

EUVD-2025-114200

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

EUVD-2025-114852

Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...

MAL-2025-148542 Malicious code in terser-webpack-plugin-airbnb-test-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a06295fbc84afce143fd5b0a10715eb54d6bfc38ec32d8c2022006a9c0cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123187

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...

MAL-2025-140301 Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c7bc08e32678dbc7a5f4c90b7c8e47cbb9d8fb461d41c5454e9bcc13d054b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...