MAL-2025-140579 Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121292

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif npm...

MAL-2025-18278 Malicious code in dendrochronology-browserify-cosmiconfig-optimize-css-assets-webpack-plugin (npm)

The package dendrochronology-browserify-cosmiconfig-optimize-css-assets-webpack-plugin was found to contain malicious code...