EUVD-2025-121381

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...

EUVD-2025-111415

Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...

EUVD-2025-122631

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard npm...

EUVD-2025-123595

Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 npm...

MAL-2025-145108 Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148542 Malicious code in terser-webpack-plugin-airbnb-test-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a06295fbc84afce143fd5b0a10715eb54d6bfc38ec32d8c2022006a9c0cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123880

Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin npm...

EUVD-2025-116854

Malicious code in airbnb-antares-terser-webpack-plugin-oauth npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...

EUVD-2025-115432

Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport npm...

EUVD-2025-115285

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype npm...

EUVD-2025-114866

Malicious code in cressida-sequelize-wolf-terser-webpack-plugin npm...

EUVD-2025-122403

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...

EUVD-2025-124445

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...

EUVD-2025-116106

Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk npm...

EUVD-2025-121376

Malicious code in terser-webpack-plugin-foundation-less-subscription npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edd1f1aeb6d56a2e9830a51d80927d72aa295e7e75670337818f6d28d1f6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...