EUVD-2025-112753

Malicious code in html-webpack-plugin-dagda-axios-jest npm...

EUVD-2025-124556

Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...

EUVD-2025-124445

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...

EUVD-2025-111185

Malicious code in meteor-registry-html-webpack-plugin-gravity npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6907b6287280cdd51be770f95a0016abb5804f689916408a57db5104aff9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112744

Malicious code in html-webpack-plugin-postcss-aether-magellan npm...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112745

Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...

EUVD-2025-112741

Malicious code in html-webpack-plugin-sedna-css-loader-nebula npm...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

EUVD-2025-112746

Malicious code in html-webpack-plugin-kastra-yakutsk-hyperion npm...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113973

Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin npm...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...