665 matches found
EUVD-2025-114405
Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...
Malicious code in callback-run-script-html-webpack-plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113065
Malicious code in gridsome-oauth-bulma-html-webpack-plugin npm...
EUVD-2025-123260
Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...
EUVD-2025-111415
Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...
EUVD-2025-124502
Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify npm...
EUVD-2025-111314
Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex npm...
EUVD-2025-122693
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...
EUVD-2025-120161
Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...
EUVD-2025-112709
Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...
EUVD-2025-112607
Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin npm...
EUVD-2025-114783
Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml npm...
EUVD-2025-123149
Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby npm...
EUVD-2025-120423
Malicious code in winston-magellan-miranda-terser-webpack-plugin npm...
EUVD-2025-123177
Malicious code in proxima-terser-webpack-plugin-materialize-rollup npm...
EUVD-2025-121233
Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...
Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in terser-webpack-plugin-canopus-antd-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250032ab90b99c65c7a7cdc094d0ebde80678057059d92eb65925a01753e7d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...