EUVD-2025-120739

Malicious code in vortex-request-websockets-html-webpack-plugin npm...

EUVD-2025-114507

Malicious code in despina-octans-metalsmith-html-webpack-plugin npm...

EUVD-2025-112734

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

EUVD-2025-123928

Malicious code in pavo-buffer-terser-webpack-plugin-nightmare npm...

EUVD-2025-121371

Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...

EUVD-2025-115487

Malicious code in chakra-ui-lint-webpack-yildun npm...

EUVD-2025-116786

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...

Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115285

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...

EUVD-2025-122828

Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin npm...

EUVD-2025-123187

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...

EUVD-2025-121650

Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...

EUVD-2025-114847

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...

EUVD-2025-114771

Malicious code in css-minimizer-webpack-plugin-yaml-sails-test npm...

EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

EUVD-2025-114778

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...

EUVD-2025-111864

Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...

Malicious code in terser-webpack-plugin-csv-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2dba0f2f9be6ad4f163dc677a2d1d35025a99545cda5729227a326971c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...