MAL-2025-149402 Malicious code in webpack-perseus-version-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0bd145a99ea5128f5d6470882e3e2efddd123e1742a090cbad1d83b53255df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140301 Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c7bc08e32678dbc7a5f4c90b7c8e47cbb9d8fb461d41c5454e9bcc13d054b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145874 Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142314 Malicious code in event-html-webpack-plugin-json-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875e00bfa3e1b4edd4e8060b916a67fb8cd83337e82e497bc92c17e79e411199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142661 Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146074 Malicious code in perseus-chariklo-webpack-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f539904b019a9a6927140559d0a40efa04b8065a579e3438207e57294f5c867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143395 Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56097

Malicious code in webpack-resource-plugin npm...

EUVD-2025-56099

Malicious code in @rce-web/webpack-resource-plugin npm...

Malicious code in @rce-web/webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd53e71efdc2208a44d689cb457a51c5dcdbe1518e27707d2e5c29e91d44da1 The package @rce-web/webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-61718 Malicious code in @rce-web/webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd53e71efdc2208a44d689cb457a51c5dcdbe1518e27707d2e5c29e91d44da1 The package @rce-web/webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0dcd9d31d33b10f0fbce9a0b24504967e12d025d0d39f38a446fdea7abc132 The package webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-66127 Malicious code in webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0dcd9d31d33b10f0fbce9a0b24504967e12d025d0d39f38a446fdea7abc132 The package webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-38444

Malicious code in startupkit-umbraco-webpack npm...

MAL-2025-49455 Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-37869

Malicious code in webpack-jsxcompile npm...

MAL-2025-49363 Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...