EUVD-2025-120861

Malicious code in ursa-phoenix-webpack-zephyr npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

EUVD-2025-120235

Malicious code in xenos-xenon-husky-webpack npm...

EUVD-2025-120158

Malicious code in yakutsk-kastra-webpack-release-it npm...

EUVD-2025-114967

Malicious code in cors-vuetify-mensa-webpack npm...

Malicious code in package-playwright-webpack-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65a6262100bed5290dd85a48aa5f7bb581761effb44cc49ac2311ea29a74b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141611 Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114783

Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml npm...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120535

Malicious code in webpack-colors-xerxes-slidev npm...

EUVD-2025-120537

Malicious code in webpack-chakra-ui-style-loader-proxima npm...

EUVD-2025-120530

Malicious code in webpack-init-uninstall-rimraf npm...

EUVD-2025-120532

Malicious code in webpack-ganymede-pm2-sails npm...

EUVD-2025-120533

Malicious code in webpack-eridanus-iota-cosmiconfig npm...

EUVD-2025-120520

Malicious code in webpack-terser-yonder-delphinus npm...

EUVD-2025-120525

Malicious code in webpack-prettier-stylelint-indus-version npm...

EUVD-2025-121369

Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss npm...

EUVD-2025-112071

Malicious code in juno-unuk-indus-webpack npm...