EUVD-2025-180170

Malicious code in axios-astro-html-webpack-plugin-algol npm...

EUVD-2025-180326

Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown npm...

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

EUVD-2025-179411

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics npm...

EUVD-2025-179461

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...

EUVD-2025-178745

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...

EUVD-2025-178508

Malicious code in html-webpack-plugin-hologram-stream-install npm...

EUVD-2025-179463

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...

EUVD-2025-178507

Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole npm...

EUVD-2025-175998

Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta npm...

EUVD-2025-178501

Malicious code in html-webpack-plugin-zenobia-nebula-antares npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189878 Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d806205b74b56ad6447e53075cc4a8f467cf38ad549070b55924b5674f905531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187372 Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76c400c13c978ef6cec8cf7e638527ede28cbd33c8bdda65e4c91e8e97c489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187381 Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7c207337434698205e1a554e373872174bfe0253efa98b12e47eb140c345e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188685 Malicious code in phoenix-perseus-mocha-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab6606c12f1d8a31b4ffa60bdd8a08643e40c577af49e628586123bd9d36ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111725

Malicious code in library-quasar-andromeda-terser-webpack-plugin npm...