EUVD-2025-114450

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...

EUVD-2025-114774

Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares npm...

EUVD-2025-113633

Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...

Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122694

Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin npm...

EUVD-2025-121283

Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione npm...

EUVD-2025-114782

Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version npm...

EUVD-2025-114788

Malicious code in css-minimizer-webpack-plugin-bellatrix-jabbah-commitlint-config-angular npm...

EUVD-2025-124720

Malicious code in mui-css-minimizer-webpack-plugin-chariklo-nashira npm...

EUVD-2025-122631

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard npm...

MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124614

Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs npm...

EUVD-2025-120584

Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig npm...

MAL-2025-146162 Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7758742d6ce3f84c41f899059c9fa2f6d10ec4d81abe2446f4316493355a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141331 Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141329 Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea601fe32f2986c24cf6764da27b039900a4f81ff22922b1697d5543d1533f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146013 Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142838 Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3d7c7613ca3b24203a1a6b67a092b1b7c05ab67e78b886ed6158382f56e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141335 Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e5940c3692e0184723af4b60b6ab2fc2f47716e729018664d180a463eb807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...