2098 matches found
EUVD-2025-176109
Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
EUVD-2025-178299
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...
EUVD-2025-177041
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...
MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188834 Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da84a8b179398617b8595ea7e18eeda5d4da7cd2cf8ea395a71a7723e12d8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
SUSE CVE-2025-64486
calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...
CVE-2025-64486
A vulnerability has been identified in Calibre. It does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve arbitrary code executi...
EUVD-2025-122162
Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint npm...
EUVD-2025-124056
Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...
EUVD-2025-121598
Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...
EUVD-2025-115000
Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...
EUVD-2025-121822
Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...
Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121292
Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif npm...
EUVD-2025-115589
Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa npm...
EUVD-2025-122245
Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...
EUVD-2025-115826
Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx npm...