668 matches found
EUVD-2025-124556
Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...
EUVD-2025-123928
Malicious code in pavo-buffer-terser-webpack-plugin-nightmare npm...
EUVD-2025-115285
Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...
EUVD-2025-111210
Malicious code in meteor-corvus-heka-terser-webpack-plugin npm...
EUVD-2025-116620
Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...
EUVD-2025-123187
Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...
EUVD-2025-115812
Malicious code in callback-apollo-forever-html-webpack-plugin npm...
EUVD-2025-121775
Malicious code in spica-andromeda-loglevel-terser-webpack-plugin npm...
EUVD-2025-121586
Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin npm...
EUVD-2025-111785
Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...
Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111864
Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...
EUVD-2025-112460
Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository npm...
EUVD-2025-114123
Malicious code in element-ui-winston-html-webpack-plugin-npm npm...
MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-121650
Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...