EUVD-2025-121823

Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

Malicious code in deimos-lint-mini-css-extract-plugin-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c02587c8bfdfb4a5cb0891d69ef15f034064df3bdd7fc4dbc4172fe0544af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111137

Malicious code in mini-css-extract-plugin-library-proxima-ultra npm...

EUVD-2025-112608

Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin npm...

EUVD-2025-112708

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...

EUVD-2025-113517

Malicious code in fork-publish-node-config-mini-css-extract-plugin npm...

EUVD-2025-115458

Malicious code in chalk-mini-css-extract-plugin-await-xo npm...

EUVD-2025-111120

Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes npm...

EUVD-2025-112721

Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...

EUVD-2025-121476

Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown npm...

EUVD-2025-120998

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

Malicious code in vulcan-css-loader-command-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121519

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...

EUVD-2025-111277

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...

EUVD-2025-121269

Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...

EUVD-2025-123793

Malicious code in phenomic-css-minimizer-webpack-plugin-titan-vulcan npm...