EUVD-2025-123177

Malicious code in proxima-terser-webpack-plugin-materialize-rollup npm...

EUVD-2025-115687

Malicious code in carina-phoebe-materialize-rollup npm...

MAL-2025-146745 Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...