Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177644

Malicious code in nestjs-css-loader-command-mensa npm...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

EUVD-2025-176450

Malicious code in seismology-jabbah-exosphere-mini-css-extract-plugin npm...

MAL-2025-190228 Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72c3967bfa61a9dcf238d33c4284ce2f1f41d6b3f850a019d161f7672cf5834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188308 Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124049

Malicious code in optimize-css-assets-webpack-plugin-terser-webpack-plugin-rigel-loop npm...

EUVD-2025-114784

Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public npm...

EUVD-2025-123321

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...

EUVD-2025-124060

Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede npm...

EUVD-2025-114276

Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster npm...

EUVD-2025-114227

Malicious code in elara-mini-css-extract-plugin-lynx-grus npm...

EUVD-2025-111628

Malicious code in local-galaxy-css-loader-chariklo npm...

EUVD-2025-114131

Malicious code in element-ui-prettier-css-loader-elara npm...

EUVD-2025-121476

Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-120275

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse npm...

EUVD-2025-120129

Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...