EUVD-2025-177431

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...

EUVD-2025-179454

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...

EUVD-2025-178299

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177109

Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo npm...

EUVD-2025-176109

Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...

EUVD-2025-177313

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton npm...

EUVD-2025-176600

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...

EUVD-2025-179393

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...

EUVD-2025-177945

Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino npm...

EUVD-2025-177910

Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...

EUVD-2025-177041

Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...

EUVD-2025-179328

Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

EUVD-2025-177952

Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin npm...

EUVD-2025-178405

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...

MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188834 Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da84a8b179398617b8595ea7e18eeda5d4da7cd2cf8ea395a71a7723e12d8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178004

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...

SUSE CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...