EUVD-2025-120533

Malicious code in webpack-eridanus-iota-cosmiconfig npm...

EUVD-2025-124445

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...

EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120539

Malicious code in webpack-bunyan-xo-babel npm...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

EUVD-2025-114967

Malicious code in cors-vuetify-mensa-webpack npm...

EUVD-2025-120526

Malicious code in webpack-postgres-draco-bunyan npm...

EUVD-2025-113534

Malicious code in forever-webpack-toml-rest npm...

EUVD-2025-122956

Malicious code in query-despina-css-minimizer-webpack-plugin-juno npm...

EUVD-2025-115285

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...

EUVD-2025-116572

Malicious code in apollo-server-terser-webpack-plugin-quantum npm...

EUVD-2025-124095

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...

MAL-2025-141305 Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149395 Malicious code in webpack-dotenv-upgrade-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c14c5941a4916f942059840163dc3766f319a05cd42f18f3b96ca5beb4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121598

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...

MAL-2025-147094 Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc92c96d3ca99d6166dcc1bfdf45c8e4a21ea3ca0e602f88717aebed70a8c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...