EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123928

Malicious code in pavo-buffer-terser-webpack-plugin-nightmare npm...

EUVD-2025-114824

Malicious code in csrf-html-webpack-plugin-postgres-webdriver-manager npm...

EUVD-2025-116620

Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...

EUVD-2025-112143

Malicious code in json-development-publish-terser-webpack-plugin npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112745

Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

EUVD-2025-112748

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...

EUVD-2025-112753

Malicious code in html-webpack-plugin-dagda-axios-jest npm...

EUVD-2025-112691

Malicious code in husky-loop-writable-html-webpack-plugin npm...

Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116106

Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk npm...

Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116868

Malicious code in aether-mysql-eslint-config-html-webpack-plugin npm...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

EUVD-2025-114507

Malicious code in despina-octans-metalsmith-html-webpack-plugin npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

EUVD-2025-121371

Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...