EUVD-2025-116125

Malicious code in betelgeuse-eridanus-css-minimizer-webpack-plugin-zenobia npm...

EUVD-2025-111502

Malicious code in lyra-leda-css-loader-orbit npm...

EUVD-2025-122696

Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint npm...

EUVD-2025-113102

Malicious code in graphql-transport-umbriel-mini-css-extract-plugin npm...

EUVD-2025-120593

Malicious code in webdriver-manager-titan-mini-css-extract-plugin-izar npm...

EUVD-2025-123789

Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin npm...

MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145856 Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141329 Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea601fe32f2986c24cf6764da27b039900a4f81ff22922b1697d5543d1533f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112046

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...

EUVD-2025-111513

Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda npm...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-122693

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...

EUVD-2025-116128

Malicious code in betelgeuse-css-loader-luna-dactyl npm...

EUVD-2025-114405

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...

EUVD-2025-123141

Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket npm...

EUVD-2025-124060

Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede npm...

EUVD-2025-124059

Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...

MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...