937 matches found
MAL-2025-141611 Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124048
Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin npm...
EUVD-2025-121283
Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione npm...
EUVD-2025-123461
Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass npm...
EUVD-2025-121383
Malicious code in terser-webpack-plugin-csv-transform-native npm...
EUVD-2025-124764
Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...
EUVD-2025-112713
Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...
EUVD-2025-115792
Malicious code in callback-run-script-html-webpack-plugin-server npm...
EUVD-2025-121233
Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...
EUVD-2025-123861
Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-124050
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...
EUVD-2025-112747
Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus npm...
EUVD-2025-120543
Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...
Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112746
Malicious code in html-webpack-plugin-kastra-yakutsk-hyperion npm...
EUVD-2025-112709
Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...
MAL-2025-143370 Malicious code in html-webpack-plugin-rigel-heka-gemini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccda5bca647ef2a6a8e7663d0c52c518824ee0fdb312fe1320b093bfdd154c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...