EUVD-2025-113571

Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin npm...

EUVD-2025-124310

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...

EUVD-2025-112748

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...

EUVD-2025-112739

Malicious code in html-webpack-plugin-sync-perseus-castor npm...

EUVD-2025-123405

Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin npm...

EUVD-2025-123851

Malicious code in perseus-blaze-pegasus-html-webpack-plugin npm...

EUVD-2025-116868

Malicious code in aether-mysql-eslint-config-html-webpack-plugin npm...

Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122472

Malicious code in rimraf-izar-html-webpack-plugin-rigel npm...

MAL-2025-149190 Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37270

Malicious code in vue2-script-ext-html-webpack-plugin npm...

MAL-2025-49276 Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...

MAL-2025-47677 Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in html-webpack-plugin-4 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in neutrino-paleontology-html-webpack-plugin-mui (npm)

The package neutrino-paleontology-html-webpack-plugin-mui was found to contain malicious code...

MAL-2025-44740 Malicious code in jabbah-antares-protractor-html-webpack-plugin (npm)

The package jabbah-antares-protractor-html-webpack-plugin was found to contain malicious code...

MAL-2025-43440 Malicious code in altair-blaze-html-webpack-plugin-ora (npm)

The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...