116 matches found
EUVD-2025-111124
Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts npm...
EUVD-2025-112708
Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...
EUVD-2025-111121
Malicious code in mini-css-extract-plugin-sedna-fetch-adonis npm...
MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142098 Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cfcb545559f2996c7f4a71f9a4e7d0a08c42e31a731215a45e3910b4edabdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141604 Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122295
Malicious code in sagitta-vortex-norma-mini-css-extract-plugin npm...
EUVD-2025-123521
Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...
EUVD-2025-111136
Malicious code in mini-css-extract-plugin-lint-websockets-polaris npm...
EUVD-2025-111138
Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright npm...
Malicious code in mini-css-extract-plugin-callisto-vulcan-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fefa2b8aac08eb3db27624e6a94ba26bdf920229211f6b3eeda2ce26bd6c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115932
Malicious code in buffer-soap-vortex-mini-css-extract-plugin npm...
EUVD-2025-111129
Malicious code in mini-css-extract-plugin-passport-centaurus-eslint-plugin npm...
EUVD-2025-111117
Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...
EUVD-2025-111143
Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...
EUVD-2025-111144
Malicious code in mini-css-extract-plugin-cli-quasar-cache npm...
EUVD-2025-114105
Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware npm...
EUVD-2025-111637
Malicious code in lint-xo-ceres-mini-css-extract-plugin npm...