EUVD-2025-115589

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa npm...

EUVD-2025-120084

Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...

EUVD-2025-120668

Malicious code in warp-avior-html-webpack-plugin-webpack npm...

EUVD-2025-112733

Malicious code in html-webpack-plugin-zenobia-terser-sqlite npm...

EUVD-2025-112046

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...

EUVD-2025-111664

Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less npm...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121681

Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin npm...

EUVD-2025-123089

Malicious code in pulsar-html-webpack-plugin-yaml-passport npm...

EUVD-2025-113274

Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran npm...

EUVD-2025-121383

Malicious code in terser-webpack-plugin-csv-transform-native npm...

EUVD-2025-124764

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...

EUVD-2025-122920

Malicious code in quito-request-karma-html-webpack-plugin npm...

EUVD-2025-112542

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...

EUVD-2025-113422

Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres npm...

EUVD-2025-124059

Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...

EUVD-2025-124055

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...

Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121233

Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...

Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...