EUVD-2025-112434

Malicious code in install-mini-css-extract-plugin-test-sqlite npm...

EUVD-2025-122398

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...

EUVD-2025-116453

Malicious code in atlas-mini-css-extract-plugin-equinox-stream npm...

MAL-2025-141604 Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147721 Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2186526dff27c6c4fa856cfe4c9936a3d13ab0f924c3f55f611a9ca589374cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142595 Malicious code in fork-publish-node-config-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f6e9a7562a333d4e73524c50d96a1a156c6d0d860a6af6a4cad3f0ea51e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111143

Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...

Malicious code in repository-helios-mini-css-extract-plugin-gemini (npm)

The package repository-helios-mini-css-extract-plugin-gemini was found to contain malicious code...

Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm)

The package rest-changelog-mini-css-extract-plugin-eslint-plugin was found to contain malicious code...

Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm)

The package spectron-mini-css-extract-plugin-mongoose-indus was found to contain malicious code...

MAL-2025-45812 Malicious code in repository-helios-mini-css-extract-plugin-gemini (npm)

The package repository-helios-mini-css-extract-plugin-gemini was found to contain malicious code...

MAL-2025-45820 Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm)

The package rest-changelog-mini-css-extract-plugin-eslint-plugin was found to contain malicious code...

MAL-2025-46122 Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm)

The package spectron-mini-css-extract-plugin-mongoose-indus was found to contain malicious code...

MAL-2025-45561 Malicious code in pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin (npm)

The package pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin was found to contain malicious code...

MAL-2025-43761 Malicious code in changelog-duplex-hermes-mini-css-extract-plugin (npm)

The package changelog-duplex-hermes-mini-css-extract-plugin was found to contain malicious code...

Malicious code in postcss-loader-dotenv-safe-mini-css-extract-plugin-supervisor (npm)

The package postcss-loader-dotenv-safe-mini-css-extract-plugin-supervisor was found to contain malicious code...

MAL-2025-37883 Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)

The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...

MAL-2025-18287 Malicious code in dependencies-node-sass-arcturus-mini-css-extract-plugin (npm)

The package dependencies-node-sass-arcturus-mini-css-extract-plugin was found to contain malicious code...

Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code...