EUVD-2025-121314

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...

EUVD-2025-116868

Malicious code in aether-mysql-eslint-config-html-webpack-plugin npm...

EUVD-2025-121233

Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...

EUVD-2025-120527

Malicious code in webpack-perseus-version-hyperion npm...

EUVD-2025-115987

Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk npm...

EUVD-2025-115528

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin npm...

EUVD-2025-120515

Malicious code in webpack-yakutsk-tailwindcss-test npm...

EUVD-2025-124060

Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede npm...

EUVD-2025-124139

Malicious code in octans-transport-parcel-terser-webpack-plugin npm...

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116713

Malicious code in antares-acamar-betelgeuse-webpack npm...

Malicious code in cors-vuetify-mensa-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67a4c307c8503a7fe4ecc0e69ea682388112af41d9e1aae223fc7ef001ce09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114706

Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel npm...

EUVD-2025-124435

Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...

MAL-2025-146162 Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7758742d6ce3f84c41f899059c9fa2f6d10ec4d81abe2446f4316493355a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141611 Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...