EUVD-2025-111277

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...

EUVD-2025-113503

Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides npm...

EUVD-2025-115634

Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite npm...

EUVD-2025-123141

Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket npm...

EUVD-2025-124053

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...

EUVD-2025-122044

Malicious code in sequelize-standard-terser-webpack-plugin-rest npm...

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124139

Malicious code in octans-transport-parcel-terser-webpack-plugin npm...

Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112711

Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114200

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...

EUVD-2025-112749

Malicious code in html-webpack-plugin-hercules-aldebaran-electron npm...

EUVD-2025-113048

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin npm...

EUVD-2025-112735

Malicious code in html-webpack-plugin-xenon-gacrux-io npm...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-111415

Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...

MAL-2025-144905 Malicious code in meteor-corvus-heka-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479cdad0f54173ac42f22e183a69a52bf1784726c75ba6dc76eb8c6b38dab700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146635 Malicious code in promise-cressida-link-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55087f73e61906bf5e0de5f431ab2561dc61d4dc847696b9b09fb2b7b812ef23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149261 Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...