MAL-2025-147094 Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc92c96d3ca99d6166dcc1bfdf45c8e4a21ea3ca0e602f88717aebed70a8c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141331 Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114780

Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss npm...

MAL-2025-149507 Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115487

Malicious code in chakra-ui-lint-webpack-yildun npm...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

EUVD-2025-121381

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...

EUVD-2025-111551

Malicious code in loopback-server-grunt-terser-webpack-plugin npm...

EUVD-2025-112908

Malicious code in heka-exec-terser-webpack-plugin-start npm...

EUVD-2025-113796

Malicious code in event-html-webpack-plugin-json-sqlite npm...

EUVD-2025-120795

Malicious code in version-firebase-yildun-terser-webpack-plugin npm...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

EUVD-2025-114847

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...

EUVD-2025-121650

Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...

EUVD-2025-114778

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...

EUVD-2025-111210

Malicious code in meteor-corvus-heka-terser-webpack-plugin npm...

EUVD-2025-123880

Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin npm...

EUVD-2025-112833

Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade npm...

Malicious code in terser-webpack-plugin-csv-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2dba0f2f9be6ad4f163dc677a2d1d35025a99545cda5729227a326971c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...