1953 matches found
MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121371
Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...
MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142140 Malicious code in eridanus-apollo-webpack-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b6d3fa2f2b87fcc3aa5e1370bba47b406350a2e793c8bc6d599b8bbd58135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143375 Malicious code in html-webpack-plugin-upgrade-remark-enceladus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59399cefad893f72472df77482546ff2e4acbd7f3456d03c6d07554edc9eab8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113633
Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...
EUVD-2025-120530
Malicious code in webpack-init-uninstall-rimraf npm...
EUVD-2025-120169
Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...
EUVD-2025-120795
Malicious code in version-firebase-yildun-terser-webpack-plugin npm...
Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114443
Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver npm...
EUVD-2025-120521
Malicious code in webpack-supervisor-dotenv-vega npm...
EUVD-2025-120084
Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...
EUVD-2025-120533
Malicious code in webpack-eridanus-iota-cosmiconfig npm...
EUVD-2025-122038
Malicious code in sequelize-webpack-electron-sqlite npm...
EUVD-2025-114498
Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede npm...
EUVD-2025-112753
Malicious code in html-webpack-plugin-dagda-axios-jest npm...