MAL-2025-188308 Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176064

Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift npm...

EUVD-2025-177835

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede npm...

EUVD-2025-177833

Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it npm...

EUVD-2025-177831

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...

EUVD-2025-180480

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap npm...

EUVD-2025-178498

Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict npm...

EUVD-2025-122398

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...

EUVD-2025-124373

Malicious code in node-sass-mini-css-extract-plugin-spawn-apex npm...

EUVD-2025-111369

Malicious code in materialize-materialize-mini-css-extract-plugin-readable npm...

EUVD-2025-111137

Malicious code in mini-css-extract-plugin-library-proxima-ultra npm...

EUVD-2025-111135

Malicious code in mini-css-extract-plugin-meteor-capella-nconf npm...

EUVD-2025-111134

Malicious code in mini-css-extract-plugin-meteor-private-thuban npm...

EUVD-2025-111124

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts npm...

EUVD-2025-111120

Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes npm...

EUVD-2025-111121

Malicious code in mini-css-extract-plugin-sedna-fetch-adonis npm...

EUVD-2025-111936

Malicious code in kinetic-mini-css-extract-plugin-winston-spectron npm...

Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-lint-mini-css-extract-plugin-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c02587c8bfdfb4a5cb0891d69ef15f034064df3bdd7fc4dbc4172fe0544af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...