EUVD-2025-120158

Malicious code in yakutsk-kastra-webpack-release-it npm...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

EUVD-2025-120522

Malicious code in webpack-sirius-remark-antd npm...

EUVD-2025-124661

Malicious code in mysql-optimize-css-assets-webpack-plugin-castor-css-minimizer-webpack-plugin npm...

EUVD-2025-122472

Malicious code in rimraf-izar-html-webpack-plugin-rigel npm...

EUVD-2025-114200

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...

EUVD-2025-124891

Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora npm...

EUVD-2025-113274

Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran npm...

EUVD-2025-114692

Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...

EUVD-2025-120528

Malicious code in webpack-kinetic-enceladus-redis npm...

EUVD-2025-121372

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader npm...

EUVD-2025-112162

Malicious code in jovian-loopback-terser-webpack-plugin-protractor npm...

EUVD-2025-114339

Malicious code in dotenv-safe-postcss-loader-taurus-webpack npm...

EUVD-2025-123851

Malicious code in perseus-blaze-pegasus-html-webpack-plugin npm...

EUVD-2025-115566

Malicious code in centaurus-bootstrap-callback-webpack npm...

Malicious code in config-meissa-norma-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116279

Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios npm...

EUVD-2025-111513

Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda npm...

EUVD-2025-122729

Malicious code in rehype-winston-webpack-iota npm...

Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...