Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/09/18 3:30 a.m.•14 views

Malicious Package

Overview lint-xo-ceres-mini-css-extract-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder