6307 matches found
EUVD-2025-121763
Malicious code in spica-jovian-norma-css-loader npm...
EUVD-2025-122197
Malicious code in scripts-blaze-css-loader-venus npm...
Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120684
Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat npm...
EUVD-2025-113606
Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic npm...
Malicious code in spica-magellan-css-loader-eslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123211
Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...
EUVD-2025-111117
Malicious code in mini-css-extract-plugin-update-cassini-blaze npm...
EUVD-2025-112812
Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe npm...
Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in local-galaxy-css-loader-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113726
Malicious code in express-mini-css-extract-plugin-procyon-acamar npm...
EUVD-2025-121598
Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...
EUVD-2025-111136
Malicious code in mini-css-extract-plugin-lint-websockets-polaris npm...
EUVD-2025-113633
Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...
EUVD-2025-121292
Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif npm...
EUVD-2025-115932
Malicious code in buffer-soap-vortex-mini-css-extract-plugin npm...
EUVD-2025-114793
Malicious code in css-loader-soap-elektra-andromeda npm...
Malicious code in gacrux-dagda-koa-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5ee59e11ee829934c641c5b26806bcec0bca1048843e128d64e3bfd3ef67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...