EUVD-2025-114405

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c75a1f2a4473c3bdad22140daaaab48fb2b8967e39e94cdf6b036285b6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

Malicious code in terser-webpack-plugin-csv-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2dba0f2f9be6ad4f163dc677a2d1d35025a99545cda5729227a326971c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114777

Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio npm...

EUVD-2025-114498

Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede npm...

EUVD-2025-114450

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...

EUVD-2025-124095

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...

EUVD-2025-113503

Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides npm...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-112713

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-121574

Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx npm...

EUVD-2025-120948

Malicious code in unuk-iota-zenith-html-webpack-plugin npm...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121369

Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss npm...

Malicious code in terser-webpack-plugin-materialize-hugo-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc0248dd71f94de549dbe0e1436fea2544422c6001231dc2ed9ae2d21e7618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121109

Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus npm...

EUVD-2025-115987

Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk npm...

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...