EUVD-2025-178240

Malicious code in jupiter-scripts-html-webpack-plugin-blitz npm...

EUVD-2025-176889

Malicious code in pyxis-alphard-event-html-webpack-plugin npm...

EUVD-2025-176252

Malicious code in spica-html-webpack-plugin-kronos-husky npm...

EUVD-2025-177313

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton npm...

EUVD-2025-177990

Malicious code in lyra-nebula-node-config-terser-webpack-plugin npm...

EUVD-2025-178504

Malicious code in html-webpack-plugin-vega-atlas-fetch npm...

EUVD-2025-179933

Malicious code in bunyan-redis-capella-html-webpack-plugin npm...

MAL-2025-189269 Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961e8a7cfffd287292e217d76e3379b062907280f409cf0ea9836155a60343e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187379 Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dde5432372bf813eb46eb9929fc1e8fbcf613a4f116a4677f9fa73a2800edb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188264 Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3221eb423eac0b572d326e1984f49231a18c9d5791b59c0f4a62fa33add06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186753 Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178067

Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

EUVD-2025-175845

Malicious code in ultra-html-webpack-plugin-zenith-quito npm...

EUVD-2025-177618

Malicious code in nextjs-html-webpack-plugin-express-gemini npm...

EUVD-2025-177740

Malicious code in mui-norma-callisto-terser-webpack-plugin npm...

Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178548

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...