EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

EUVD-2025-114405

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...

EUVD-2025-114772

Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe npm...

EUVD-2025-124661

Malicious code in mysql-optimize-css-assets-webpack-plugin-castor-css-minimizer-webpack-plugin npm...

EUVD-2025-122162

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint npm...

EUVD-2025-114276

Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster npm...

EUVD-2025-111771

Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol npm...

EUVD-2025-114450

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...

EUVD-2025-124392

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan npm...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120795

Malicious code in version-firebase-yildun-terser-webpack-plugin npm...

EUVD-2025-124050

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122631

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard npm...

EUVD-2025-112820

Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114847

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...

EUVD-2025-113796

Malicious code in event-html-webpack-plugin-json-sqlite npm...

EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

Malicious code in terser-webpack-plugin-canopus-antd-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250032ab90b99c65c7a7cdc094d0ebde80678057059d92eb65925a01753e7d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...