EUVD-2025-123321

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120549

Malicious code in webdriverio-private-orbit-terser-webpack-plugin npm...

EUVD-2025-124764

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...

EUVD-2025-121980

Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex npm...

EUVD-2025-113893

Malicious code in eslint-enif-webpack-event npm...

EUVD-2025-122293

Malicious code in sagitta-webpack-karma-materialize npm...

EUVD-2025-124556

Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...

EUVD-2025-112143

Malicious code in json-development-publish-terser-webpack-plugin npm...

EUVD-2025-122283

Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat npm...

EUVD-2025-116620

Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...

EUVD-2025-114771

Malicious code in css-minimizer-webpack-plugin-yaml-sails-test npm...

Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123979

Malicious code in package-playwright-webpack-antares npm...

EUVD-2025-115077

Malicious code in config-meissa-norma-webpack npm...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115068

Malicious code in config-terser-webpack-plugin-husky-eleventy npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...