MAL-2025-148554 Malicious code in terser-webpack-plugin-lint-toml-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f154561b1e2ab5853761f1ac96534b4e5e5ec7bf8e7e8fe50bdc44f46703bde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145476 Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd914900fc67827f00e07c2f5c5fcde3d709bb90a7146f51700c73d01e22125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147193 Malicious code in rehype-winston-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147504 Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56097

Malicious code in webpack-resource-plugin npm...

EUVD-2025-56099

Malicious code in @rce-web/webpack-resource-plugin npm...

Malicious code in @rce-web/webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd53e71efdc2208a44d689cb457a51c5dcdbe1518e27707d2e5c29e91d44da1 The package @rce-web/webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-61718 Malicious code in @rce-web/webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd53e71efdc2208a44d689cb457a51c5dcdbe1518e27707d2e5c29e91d44da1 The package @rce-web/webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0dcd9d31d33b10f0fbce9a0b24504967e12d025d0d39f38a446fdea7abc132 The package webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-66127 Malicious code in webpack-resource-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0dcd9d31d33b10f0fbce9a0b24504967e12d025d0d39f38a446fdea7abc132 The package webpack-resource-plugin was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-38444

Malicious code in startupkit-umbraco-webpack npm...

Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49455 Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-37869

Malicious code in webpack-jsxcompile npm...

MAL-2025-49363 Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...