2001 matches found
EUVD-2025-115702
Malicious code in carina-centaurus-blaze-terser-webpack-plugin npm...
EUVD-2025-123260
Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...
EUVD-2025-121636
Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall npm...
EUVD-2025-120517
Malicious code in webpack-vuetify-prompts-xanadu npm...
EUVD-2025-124061
Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library npm...
EUVD-2025-114712
Malicious code in cypress-css-minimizer-webpack-plugin-webpack-configstore npm...
EUVD-2025-114405
Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...
EUVD-2025-120533
Malicious code in webpack-eridanus-iota-cosmiconfig npm...
EUVD-2025-122596
Malicious code in resolvers-hydra-adonis-webpack npm...
EUVD-2025-115178
Malicious code in commitizen-fetch-leda-webpack npm...
EUVD-2025-120520
Malicious code in webpack-terser-yonder-delphinus npm...
Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124063
Malicious code in optimize-css-assets-webpack-plugin-cli-gatsby-aether npm...
Malicious code in config-meissa-norma-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122920
Malicious code in quito-request-karma-html-webpack-plugin npm...
EUVD-2025-113571
Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin npm...
MAL-2025-141611 Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...