Malicious Package

Overview @isfe-common/image-minimizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-176413

Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...

EUVD-2025-179458

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private npm...

EUVD-2025-179354

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin npm...

EUVD-2025-177418

Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...

EUVD-2025-178548

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...

EUVD-2025-180273

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...

EUVD-2025-176284

Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin npm...

EUVD-2025-178745

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...

EUVD-2025-179063

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin npm...

EUVD-2025-179463

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...

EUVD-2025-177259

Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...

EUVD-2025-179462

Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade npm...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

EUVD-2025-177067

Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin npm...

EUVD-2025-179887

Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin npm...

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179456

Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift npm...

EUVD-2025-179461

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...