MAL-2025-190916 Malicious code in @tezign/html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437929a07e5bc4e0e6dfe545fa858db027aa2ba4e6fa87701a09d5b07277b543 The package @tezign/html-webpack-plugin was found to contain malicious code...

Malicious code in bunyan-redis-capella-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b9ec0c5fa82205dee259b73ad694a1c72663bb5a0d4d0e23c5bbbfbe461f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178504

Malicious code in html-webpack-plugin-vega-atlas-fetch npm...

EUVD-2025-176604

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup npm...

EUVD-2025-179933

Malicious code in bunyan-redis-capella-html-webpack-plugin npm...

EUVD-2025-178501

Malicious code in html-webpack-plugin-zenobia-nebula-antares npm...

EUVD-2025-176252

Malicious code in spica-html-webpack-plugin-kronos-husky npm...

EUVD-2025-177195

Malicious code in phoenix-perseus-mocha-html-webpack-plugin npm...

EUVD-2025-177573

Malicious code in node-config-phoenix-regulus-html-webpack-plugin npm...

EUVD-2025-179670

Malicious code in comet-auth-html-webpack-plugin-request npm...

EUVD-2025-180170

Malicious code in axios-astro-html-webpack-plugin-algol npm...

EUVD-2025-178510

Malicious code in html-webpack-plugin-atlas-global-lacerta npm...

EUVD-2025-179476

Malicious code in csrf-bootes-html-webpack-plugin-ichnology npm...

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179869

Malicious code in cassini-html-webpack-plugin-loglevel-jest npm...

EUVD-2025-177417

Malicious code in orbit-html-webpack-plugin-xml-docusaurus npm...

EUVD-2025-175871

Malicious code in troposphere-comet-changelog-html-webpack-plugin npm...

EUVD-2025-178509

Malicious code in html-webpack-plugin-deimos-toml-command npm...

Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...