Malicious Package

Overview @isfe-common/image-minimizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-179458

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private npm...

EUVD-2025-180273

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...

EUVD-2025-177259

Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...

EUVD-2025-179772

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin npm...

EUVD-2025-179459

Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint npm...

EUVD-2025-179461

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...

EUVD-2025-178745

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...

EUVD-2025-179063

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin npm...

Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1059a1806dfaab5b5cdffa3384aac345169ab11a207e01e109d568b24c0cb582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179456

Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift npm...

EUVD-2025-177770

Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

EUVD-2025-176050

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio npm...

EUVD-2025-178548

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...

EUVD-2025-180295

Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin npm...

EUVD-2025-176413

Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179457

Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass npm...

EUVD-2025-179460

Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command npm...