EUVD-2025-179887

Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin npm...

EUVD-2025-178818

Malicious code in fusion-gravity-css-loader-perseus npm...

EUVD-2025-178927

Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb npm...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

EUVD-2025-178946

Malicious code in farout-colors-hologram-mini-css-extract-plugin npm...

EUVD-2025-177255

Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop npm...

EUVD-2025-178405

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...

Malicious code in fusion-gravity-css-loader-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52baf9ca8ebdb49763df8f528108db23d21f441b6cd5d8a94e2be0ad3edd8db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180399

Malicious code in apex-electron-protractor-mini-css-extract-plugin npm...

EUVD-2025-176600

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...

EUVD-2025-177834

Malicious code in mini-css-extract-plugin-nova-titan-duplex npm...

EUVD-2025-178004

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...

EUVD-2025-179463

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...

EUVD-2025-178326

Malicious code in izar-mini-css-extract-plugin-hercules-nightmare npm...

EUVD-2025-177418

Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...

EUVD-2025-177832

Malicious code in mini-css-extract-plugin-radiant-axios-sirius npm...

EUVD-2025-177910

Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...

EUVD-2025-176413

Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...

EUVD-2025-179456

Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift npm...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...