EUVD-2025-112727

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes npm...

EUVD-2025-112721

Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...

EUVD-2025-112708

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...

EUVD-2025-113801

Malicious code in event-deimos-mini-css-extract-plugin-mira npm...

EUVD-2025-114632

Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum npm...

EUVD-2025-114349

Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...

EUVD-2025-114227

Malicious code in elara-mini-css-extract-plugin-lynx-grus npm...

EUVD-2025-115623

Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin npm...

EUVD-2025-115491

Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver npm...

EUVD-2025-115458

Malicious code in chalk-mini-css-extract-plugin-await-xo npm...

EUVD-2025-115355

Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss npm...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-115015

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf npm...

EUVD-2025-116453

Malicious code in atlas-mini-css-extract-plugin-equinox-stream npm...

EUVD-2025-116403

Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin npm...

EUVD-2025-116230

Malicious code in babel-rehype-mini-css-extract-plugin-aether npm...

EUVD-2025-116846

Malicious code in airbnb-janus-uninstall-mini-css-extract-plugin npm...

EUVD-2025-111125

Malicious code in mini-css-extract-plugin-proxima-forever-altair npm...

EUVD-2025-122872

Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin npm...

MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...