EUVD-2025-112733

Malicious code in html-webpack-plugin-zenobia-terser-sqlite npm...

EUVD-2025-115392

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124055

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121583

Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...

EUVD-2025-111664

Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less npm...

EUVD-2025-112116

Malicious code in jsonp-html-webpack-plugin-epimetheus-spica npm...

EUVD-2025-121681

Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-113353

Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare npm...

EUVD-2025-120519

Malicious code in webpack-titan-upgrade-envconfig npm...

EUVD-2025-121384

Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin npm...

EUVD-2025-114281

Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...

Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-webpack-karma-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a292850308a455a38f1dd6bcfcc0ff11ffa9c15f7cb817a8023b7dea243468ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112262

Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...

Malicious code in webpack-titan-upgrade-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...