176 matches found
MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113973
Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin npm...
Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114740
Malicious code in cygnus-html-webpack-plugin-convict-sagitta npm...
EUVD-2025-112734
Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...
EUVD-2025-112740
Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...
EUVD-2025-116106
Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk npm...
Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112736
Malicious code in html-webpack-plugin-wasat-fornax-eris npm...
Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callback-run-script-html-webpack-plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120544
Malicious code in webdriverio-telesto-equinox-html-webpack-plugin npm...
EUVD-2025-112743
Malicious code in html-webpack-plugin-procyon-airbnb-relay npm...
EUVD-2025-112744
Malicious code in html-webpack-plugin-postcss-aether-magellan npm...
EUVD-2025-124310
Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...
EUVD-2025-114320
Malicious code in draco-auth-resolvers-html-webpack-plugin npm...
Malicious code in warp-avior-html-webpack-plugin-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...