676 matches found
EUVD-2025-115987
Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk npm...
Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113519
Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...
EUVD-2025-114507
Malicious code in despina-octans-metalsmith-html-webpack-plugin npm...
EUVD-2025-122828
Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin npm...
EUVD-2025-122404
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...
EUVD-2025-123337
Malicious code in procyon-css-minimizer-webpack-plugin-testcafe-markdown npm...
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143365 Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bdd909093acd269050ee6c34672fc6bcb6d1f7880dc777e24bb979bea04124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113796
Malicious code in event-html-webpack-plugin-json-sqlite npm...
Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115392
Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124764
Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...
EUVD-2025-120140
Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...
EUVD-2025-114778
Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...
EUVD-2025-123187
Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...
EUVD-2025-123287
Malicious code in promise-cressida-link-html-webpack-plugin npm...
EUVD-2025-112733
Malicious code in html-webpack-plugin-zenobia-terser-sqlite npm...