115 matches found
Malicious Package
Overview lint-xo-ceres-mini-css-extract-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ExtractPluginFromImage function. An attacker can cause disk exhaustion by supplying a crafted container image containing a decompression bomb, which decompresses to an arbitrarily large file during plugin...
Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176265
Malicious code in spectron-mini-css-extract-plugin-enif-commitizen npm...
EUVD-2025-175648
Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos npm...
EUVD-2025-176450
Malicious code in seismology-jabbah-exosphere-mini-css-extract-plugin npm...
EUVD-2025-179228
Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend npm...
EUVD-2025-178946
Malicious code in farout-colors-hologram-mini-css-extract-plugin npm...
EUVD-2025-179779
Malicious code in chalk-soap-eris-mini-css-extract-plugin npm...
EUVD-2025-180480
Malicious code in airbnb-mini-css-extract-plugin-centauri-soap npm...
EUVD-2025-175468
Malicious code in xo-mini-css-extract-plugin-vega-koa npm...
EUVD-2025-178484
Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin npm...
EUVD-2025-177833
Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it npm...
EUVD-2025-178160
Malicious code in lacerta-style-loader-mini-css-extract-plugin-less npm...
EUVD-2025-179775
Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv npm...
Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in apex-electron-protractor-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779cc6c8c43d7168deaf2cb7d9acad1a4f866432756bf35644ea6160de97ecfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188308 Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...