Malicious Package

Overview terser-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2026-1993

Malicious code in terser-js npm...

Malicious code in terser-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b13d0221d659ecaf83a068e06b73cafff9906fc1309c767b1ddcf6c3a0aef92 The package terser-js was found to contain malicious code. Source: ghsa-malware 4bd9337c93fbe1be40c4067d9cc928e52cfcd64b2085051e382cf062548f5a8e Any...

MAL-2026-206 Malicious code in terser-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b13d0221d659ecaf83a068e06b73cafff9906fc1309c767b1ddcf6c3a0aef92 The package terser-js was found to contain malicious code. Source: ghsa-malware 4bd9337c93fbe1be40c4067d9cc928e52cfcd64b2085051e382cf062548f5a8e Any...

EUVD-2025-178483

Malicious code in hydra-helmet-terser-webpack-plugin-ignite npm...

EUVD-2025-176544

Malicious code in sails-remark-terser-hyperion npm...

EUVD-2025-179527

Malicious code in cosmology-levels-terser-iota npm...

EUVD-2025-175997

Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus npm...

Malicious code in terser-isostasy-build-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033657f71986b123682d6e7e4343c3f93c872e361a0aab7fce5e54e109361a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-terser-isostasy-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d590435965fd0d4709f2a296b53d67c019e8b303be67e195da8cf4cba2cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177242

Malicious code in perturbation-coronalmassejection-terser-ganymede npm...

EUVD-2025-176500

Malicious code in schema-terser-prompts-rollup npm...

EUVD-2025-179937

Malicious code in bunyan-cosmicray-membrane-terser npm...

EUVD-2025-180327

Malicious code in ariel-markdown-arcturus-terser-webpack-plugin npm...

EUVD-2025-176771

Malicious code in redis-acamar-terser-webpack-plugin-deneb npm...

EUVD-2025-175715

Malicious code in virgo-terser-webpack-plugin-resonance-jekyll npm...

EUVD-2025-178551

Malicious code in helmet-terser-isostasy-nova npm...

Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f1fbd056f464401107ffa949a75c56dc9110b1b201fa564b844e813212402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176001

Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology npm...