EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

EUVD-2025-112262

Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...

EUVD-2025-124065

Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa npm...

EUVD-2025-112738

Malicious code in html-webpack-plugin-transform-google-transport npm...

EUVD-2025-121969

Malicious code in sirius-html-webpack-plugin-izar-europa npm...

EUVD-2025-111277

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...

EUVD-2025-114281

Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121109

Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

EUVD-2025-111396

Malicious code in markdownlint-algol-chai-terser-webpack-plugin npm...

EUVD-2025-120603

Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin npm...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

EUVD-2025-115261

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...

EUVD-2025-113503

Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides npm...

EUVD-2025-122631

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard npm...

EUVD-2025-121269

Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...

Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...