EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-123327

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe npm...

EUVD-2025-115516

Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk npm...

EUVD-2025-112756

Malicious code in html-webpack-plugin-astro-blitz-procyon npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

EUVD-2025-121920

Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...

EUVD-2025-114443

Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver npm...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112746

Malicious code in html-webpack-plugin-kastra-yakutsk-hyperion npm...

EUVD-2025-112749

Malicious code in html-webpack-plugin-hercules-aldebaran-electron npm...

EUVD-2025-112734

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116472

Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...

Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...