668 matches found
MAL-2025-146635 Malicious code in promise-cressida-link-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55087f73e61906bf5e0de5f431ab2561dc61d4dc847696b9b09fb2b7b812ef23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148548 Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143739 Malicious code in iota-publish-farout-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5af19c1d6f08e7ef2fd2f4ffea93902babce362354f088e98f6484d66559a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123327
Malicious code in procyon-html-webpack-plugin-nodemon-phoebe npm...
EUVD-2025-120948
Malicious code in unuk-iota-zenith-html-webpack-plugin npm...
Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121837
Malicious code in solis-spica-optimize-css-assets-webpack-plugin-babel npm...
EUVD-2025-120549
Malicious code in webdriverio-private-orbit-terser-webpack-plugin npm...
EUVD-2025-112745
Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...
EUVD-2025-123287
Malicious code in promise-cressida-link-html-webpack-plugin npm...
EUVD-2025-112736
Malicious code in html-webpack-plugin-wasat-fornax-eris npm...
EUVD-2025-112734
Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...
Malicious code in terser-webpack-plugin-csv-transform-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2dba0f2f9be6ad4f163dc677a2d1d35025a99545cda5729227a326971c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121383
Malicious code in terser-webpack-plugin-csv-transform-native npm...
Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112741
Malicious code in html-webpack-plugin-sedna-css-loader-nebula npm...
EUVD-2025-112735
Malicious code in html-webpack-plugin-xenon-gacrux-io npm...