665 matches found
PT-2026-3410
Summary Since 2017, the default webpack plugins have passed the entire process.env to EnvironmentPlugin. This pattern exposed ALL build environment variables to client-side JavaScript bundles whenever application code or any dependency referenced process.env.VARIABLE NAME. This is not a regressio...
EUVD-2025-198960
Malicious code in @tezign/html-webpack-plugin npm...
MAL-2025-190916 Malicious code in @tezign/html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437929a07e5bc4e0e6dfe545fa858db027aa2ba4e6fa87701a09d5b07277b543 The package @tezign/html-webpack-plugin was found to contain malicious code...
Malicious code in @tezign/html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437929a07e5bc4e0e6dfe545fa858db027aa2ba4e6fa87701a09d5b07277b543 The package @tezign/html-webpack-plugin was found to contain malicious code...
EUVD-2025-177195
Malicious code in phoenix-perseus-mocha-html-webpack-plugin npm...
EUVD-2025-177418
Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...
EUVD-2025-176600
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...
EUVD-2025-179808
Malicious code in ceres-redis-umbra-terser-webpack-plugin npm...
Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175587
Malicious code in webpack-exec-adonis-terser-webpack-plugin npm...
Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f1fbd056f464401107ffa949a75c56dc9110b1b201fa564b844e813212402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176606
Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...
EUVD-2025-177259
Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...
Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180295
Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin npm...
EUVD-2025-180072
Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin npm...
EUVD-2025-177301
Malicious code in passport-selenium-terser-webpack-plugin-juno npm...
EUVD-2025-178506
Malicious code in html-webpack-plugin-promise-meteor-dactyl npm...