EUVD-2025-114824

Malicious code in csrf-html-webpack-plugin-postgres-webdriver-manager npm...

EUVD-2025-120549

Malicious code in webdriverio-private-orbit-terser-webpack-plugin npm...

EUVD-2025-124048

Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin npm...

EUVD-2025-120541

Malicious code in webpack-apollo-remark-sedna npm...

EUVD-2025-120519

Malicious code in webpack-titan-upgrade-envconfig npm...

EUVD-2025-123861

Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...

Malicious code in rehype-winston-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112746

Malicious code in html-webpack-plugin-kastra-yakutsk-hyperion npm...

EUVD-2025-114775

Malicious code in css-minimizer-webpack-plugin-transport-spawn-command npm...

EUVD-2025-121917

Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...

MAL-2025-144675 Malicious code in magellan-webpack-global-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545c5ada6135a1efd8ee85d3182f24385c34b4d5d449063bfdced4cdb058754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111415

Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...

EUVD-2025-111185

Malicious code in meteor-registry-html-webpack-plugin-gravity npm...

MAL-2025-140579 Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

MAL-2025-139480 Malicious code in apex-html-webpack-plugin-configstore-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b8b2c4b1d74cbab0589fdfa152118eaaf2aa7aa84d5514a8cd43e5d42bf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121583

Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...

EUVD-2025-122956

Malicious code in query-despina-css-minimizer-webpack-plugin-juno npm...

MAL-2025-144913 Malicious code in meteor-html-webpack-plugin-mui-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ba44be2ccd673c3f19ceb7a542f761f31250400b8f3caa7ffa5327a7e58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...