668 matches found
MAL-2025-143361 Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121371
Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...
MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143356 Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114779
Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...
EUVD-2025-124050
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...
EUVD-2025-113605
Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...
EUVD-2025-111229
Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev npm...
EUVD-2025-113274
Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran npm...
Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112564
Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna npm...
EUVD-2025-123141
Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket npm...
EUVD-2025-112748
Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...
EUVD-2025-123149
Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby npm...
EUVD-2025-116854
Malicious code in airbnb-antares-terser-webpack-plugin-oauth npm...
EUVD-2025-114783
Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml npm...
Malicious code in protractor-europa-elektra-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5bff1274211f71d47aa49ddd63a8fb1fbe41e40c6e328bc1c8572c8cfc4c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121314
Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...