EUVD-2025-121090

Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...

EUVD-2025-120543

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...

EUVD-2025-122132

Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-121917

Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...

EUVD-2025-111771

Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol npm...

EUVD-2025-111229

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev npm...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

EUVD-2025-112564

Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna npm...

EUVD-2025-112542

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...

EUVD-2025-111864

Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114200

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145856 Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124058

Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...

MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120998

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...