EUVD-2025-123979

Malicious code in package-playwright-webpack-antares npm...

EUVD-2025-113889

Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 npm...

EUVD-2025-124435

Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-124432

Malicious code in nightwatch-terser-webpack-plugin-auth-callisto npm...

EUVD-2025-123089

Malicious code in pulsar-html-webpack-plugin-yaml-passport npm...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

EUVD-2025-112890

Malicious code in heka-webpack-init-prompts npm...

EUVD-2025-120529

Malicious code in webpack-kaus-flare-rehype npm...

EUVD-2025-120763

Malicious code in virgo-proxima-webpack-transform npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

EUVD-2025-113571

Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin npm...

EUVD-2025-116838

Malicious code in airbnb-transform-apollo-terser-webpack-plugin npm...

Malicious code in altair-playwright-webpack-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120538

Malicious code in webpack-carpo-enceladus-aether npm...

EUVD-2025-120740

Malicious code in vortex-postcss-loader-auriga-webpack npm...

Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...