EUVD-2025-112564

Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna npm...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

EUVD-2025-124060

Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede npm...

Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122044

Malicious code in sequelize-standard-terser-webpack-plugin-rest npm...

EUVD-2025-115590

Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini npm...

EUVD-2025-123847

Malicious code in perseus-chariklo-webpack-despina npm...

EUVD-2025-120530

Malicious code in webpack-init-uninstall-rimraf npm...

EUVD-2025-114443

Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver npm...

EUVD-2025-120084

Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...

EUVD-2025-122038

Malicious code in sequelize-webpack-electron-sqlite npm...

EUVD-2025-116620

Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-init-uninstall-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6471c91382e04439bad5add4efea64590c4612d7a34a262d27a4609557ada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122694

Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin npm...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-112735

Malicious code in html-webpack-plugin-xenon-gacrux-io npm...

EUVD-2025-120519

Malicious code in webpack-titan-upgrade-envconfig npm...

EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...