EUVD-2025-111630

Malicious code in local-css-loader-ursa-venus npm...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-124460

Malicious code in nightwatch-css-loader-charon-gemini npm...

EUVD-2025-120169

Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...

EUVD-2025-112722

Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin npm...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114788

Malicious code in css-minimizer-webpack-plugin-bellatrix-jabbah-commitlint-config-angular npm...

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-111117

Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

EUVD-2025-114790

Malicious code in css-loader-terser-rimraf-lyra npm...

EUVD-2025-112608

Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin npm...

EUVD-2025-124854

Malicious code in miranda-yonder-css-loader-hercules npm...

EUVD-2025-114787

Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop npm...

Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba20e4a94027f3181217bb6bdd701c4838a02c50cd8a2bd55e6fdbc9ae2f0a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...