676 matches found
MAL-2025-187379 Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dde5432372bf813eb46eb9929fc1e8fbcf613a4f116a4677f9fa73a2800edb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188264 Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3221eb423eac0b572d326e1984f49231a18c9d5791b59c0f4a62fa33add06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187030 Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0fb880a3bfb6b4d32d650b9778f2bab22b66cda0b72f0639a80bccf3fcd8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188917 Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c7e0b28606987a99e1e5a3132f404b2435465dcff64ef832c045c0ce0f5423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175871
Malicious code in troposphere-comet-changelog-html-webpack-plugin npm...
MAL-2025-186074 Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120423
Malicious code in winston-magellan-miranda-terser-webpack-plugin npm...
EUVD-2025-120376
Malicious code in wolf-optimize-css-assets-webpack-plugin-vuepress-procyon npm...
EUVD-2025-120161
Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...
EUVD-2025-121233
Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...
EUVD-2025-121090
Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...
EUVD-2025-120998
Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...
EUVD-2025-120549
Malicious code in webdriverio-private-orbit-terser-webpack-plugin npm...
EUVD-2025-120518
Malicious code in webpack-triton-optimize-css-assets-webpack-plugin-meteor npm...
EUVD-2025-121917
Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...
EUVD-2025-121773
Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local npm...
EUVD-2025-121681
Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin npm...