EUVD-2025-116786

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114812

Malicious code in csrf-sirius-webpack-iota npm...

EUVD-2025-121747

Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare npm...

EUVD-2025-120528

Malicious code in webpack-kinetic-enceladus-redis npm...

EUVD-2025-122227

Malicious code in schema-husky-webpack-acamar npm...

EUVD-2025-122899

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin npm...

EUVD-2025-121775

Malicious code in spica-andromeda-loglevel-terser-webpack-plugin npm...

EUVD-2025-111579

Malicious code in loop-style-loader-webpack-promise npm...

EUVD-2025-112118

Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt npm...

EUVD-2025-115987

Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk npm...

EUVD-2025-111411

Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin npm...

EUVD-2025-111551

Malicious code in loopback-server-grunt-terser-webpack-plugin npm...

EUVD-2025-111314

Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex npm...

EUVD-2025-120543

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...

EUVD-2025-113076

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors npm...

MAL-2025-145476 Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd914900fc67827f00e07c2f5c5fcde3d709bb90a7146f51700c73d01e22125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147450 Malicious code in rimraf-izar-html-webpack-plugin-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f0af5a2acd4f35bc9f6a12bfdee60b30945dd4a21464b014b22f579711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...