EUVD-2025-115553

Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114774

Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares npm...

EUVD-2025-113606

Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic npm...

EUVD-2025-115355

Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss npm...

EUVD-2025-111142

Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer npm...

EUVD-2025-115285

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...

EUVD-2025-115015

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf npm...

EUVD-2025-113354

Malicious code in gacrux-css-loader-puppeteer-module npm...

EUVD-2025-116128

Malicious code in betelgeuse-css-loader-luna-dactyl npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112904

Malicious code in heka-mini-css-extract-plugin-xenos-prompts npm...

EUVD-2025-113875

Malicious code in eslint-plugin-perseus-css-loader-eclipse npm...

EUVD-2025-111124

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145856 Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...