180 matches found
Malicious Package
Overview @isfe-common/image-minimizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2025-177418
Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...
EUVD-2025-176413
Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...
EUVD-2025-178745
Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...
EUVD-2025-177451
Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...
EUVD-2025-179887
Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin npm...
EUVD-2025-179463
Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...
EUVD-2025-178285
Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...
EUVD-2025-179456
Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift npm...
EUVD-2025-177255
Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop npm...
Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180295
Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin npm...
EUVD-2025-177259
Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...
MAL-2025-187030 Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0fb880a3bfb6b4d32d650b9778f2bab22b66cda0b72f0639a80bccf3fcd8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180273
Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...
Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176050
Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio npm...