Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e48a9fd6450f06e90ee5d9956c154c4f2502f33ea2ea4855e7091ec32a7172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175998

Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta npm...

EUVD-2025-175478

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota npm...

EUVD-2025-176623

Malicious code in robotics-callback-vulcan-html-webpack-plugin npm...

EUVD-2025-177838

Malicious code in middleware-webpack-resolvers-capella npm...

EUVD-2025-179821

Malicious code in centaurus-farout-html-webpack-plugin-callisto npm...

EUVD-2025-176889

Malicious code in pyxis-alphard-event-html-webpack-plugin npm...

EUVD-2025-179595

Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin npm...

EUVD-2025-176354

Malicious code in sirius-registry-webpack-quasar npm...

EUVD-2025-176958

Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin npm...

Malicious code in start-iota-webpack-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178067

Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin npm...

EUVD-2025-180044

Malicious code in biotechnology-draco-webpack-bellatrix npm...

EUVD-2025-176050

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio npm...

Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178240

Malicious code in jupiter-scripts-html-webpack-plugin-blitz npm...

EUVD-2025-179580

Malicious code in convict-writable-webpack-cosmogenic npm...

MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...