1621 matches found
Malicious code in eslint-enif-webpack-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112262
Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...
Malicious code in webpack-titan-upgrade-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123861
Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...
EUVD-2025-124048
Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin npm...
MAL-2025-148544 Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4839b0d11bd49cc80454d892a0010eb13cfbad005fb5bf93717d6f499ff2dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122524
Malicious code in restart-terser-webpack-plugin-sails-package npm...
EUVD-2025-121375
Malicious code in terser-webpack-plugin-impulse-inquirer-europa npm...
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
EUVD-2025-123847
Malicious code in perseus-chariklo-webpack-despina npm...
EUVD-2025-115133
Malicious code in commitlint-config-angular-webpack-wasat-ariel npm...
EUVD-2025-124056
Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...
Malicious code in warp-avior-html-webpack-plugin-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vortex-request-websockets-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120514
Malicious code in webpack-zenith-winston-changelog npm...
EUVD-2025-114772
Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe npm...
EUVD-2025-121747
Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare npm...
EUVD-2025-115805
Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown npm...