1951 matches found
EUVD-2025-123321
Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...
EUVD-2025-124435
Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...
EUVD-2025-124764
Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...
EUVD-2025-112890
Malicious code in heka-webpack-init-prompts npm...
EUVD-2025-123847
Malicious code in perseus-chariklo-webpack-despina npm...
EUVD-2025-112833
Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade npm...
EUVD-2025-114777
Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio npm...
EUVD-2025-121314
Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...
Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112239
Malicious code in jasmine-webpack-cache-ganymede npm...
Malicious code in rehype-winston-webpack-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121920
Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...
MAL-2025-143356 Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147560 Malicious code in sadr-envconfig-auth0-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...