173 matches found
EUVD-2025-114320
Malicious code in draco-auth-resolvers-html-webpack-plugin npm...
EUVD-2025-111785
Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...
EUVD-2025-112753
Malicious code in html-webpack-plugin-dagda-axios-jest npm...
EUVD-2025-120140
Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...
EUVD-2025-120948
Malicious code in unuk-iota-zenith-html-webpack-plugin npm...
EUVD-2025-120739
Malicious code in vortex-request-websockets-html-webpack-plugin npm...
EUVD-2025-112734
Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...
EUVD-2025-114140
Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...
EUVD-2025-111185
Malicious code in meteor-registry-html-webpack-plugin-gravity npm...
EUVD-2025-124157
Malicious code in octans-command-html-webpack-plugin-build npm...
EUVD-2025-116472
Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...
EUVD-2025-123264
Malicious code in promise-yildun-html-webpack-plugin-mocha npm...
Malicious code in html-webpack-plugin-transform-google-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115102
Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...
EUVD-2025-124556
Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...
EUVD-2025-112749
Malicious code in html-webpack-plugin-hercules-aldebaran-electron npm...
Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6907b6287280cdd51be770f95a0016abb5804f689916408a57db5104aff9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123287
Malicious code in promise-cressida-link-html-webpack-plugin npm...
Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...