EUVD-2025-123264

Malicious code in promise-yildun-html-webpack-plugin-mocha npm...

EUVD-2025-112735

Malicious code in html-webpack-plugin-xenon-gacrux-io npm...

EUVD-2025-124082

Malicious code in ophiuchus-rest-pyxis-html-webpack-plugin npm...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-112749

Malicious code in html-webpack-plugin-hercules-aldebaran-electron npm...

EUVD-2025-114740

Malicious code in cygnus-html-webpack-plugin-convict-sagitta npm...

Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

EUVD-2025-123851

Malicious code in perseus-blaze-pegasus-html-webpack-plugin npm...

MAL-2025-144486 Malicious code in local-fork-postgres-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55b74dedb1f55e866a3e57ff1b1150151ebfce27b4a2d1e0fa1033db37c196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143365 Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bdd909093acd269050ee6c34672fc6bcb6d1f7880dc777e24bb979bea04124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37270

Malicious code in vue2-script-ext-html-webpack-plugin npm...

MAL-2025-49276 Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...

Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47677 Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-43440 Malicious code in altair-blaze-html-webpack-plugin-ora (npm)

The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...

MAL-2025-44635 Malicious code in html-webpack-plugin-babel-express-inquirer (npm)

The package html-webpack-plugin-babel-express-inquirer was found to contain malicious code...

MAL-2025-44636 Malicious code in html-webpack-plugin-middleware-plutology-impulse (npm)

The package html-webpack-plugin-middleware-plutology-impulse was found to contain malicious code...