EUVD-2025-176216

Malicious code in start-iota-webpack-cli npm...

EUVD-2025-180072

Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin npm...

EUVD-2025-175587

Malicious code in webpack-exec-adonis-terser-webpack-plugin npm...

EUVD-2025-179454

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...

MAL-2025-189421 Malicious code in sedna-telesto-webpack-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc3a8b377d064eec4fc94c2c9bb78ddb6977bd0cce2e213300540e3d06c6e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178266

Malicious code in joviology-exobiology-antares-webpack npm...

EUVD-2025-178506

Malicious code in html-webpack-plugin-promise-meteor-dactyl npm...

EUVD-2025-179670

Malicious code in comet-auth-html-webpack-plugin-request npm...

EUVD-2025-178502

Malicious code in html-webpack-plugin-wavefunction-local-ora npm...

MAL-2025-187379 Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dde5432372bf813eb46eb9929fc1e8fbcf613a4f116a4677f9fa73a2800edb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177910

Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...

EUVD-2025-177098

Malicious code in postcss-html-webpack-plugin-enif-ultra npm...

EUVD-2025-179330

Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus npm...

EUVD-2025-176454

Malicious code in sedna-telesto-webpack-public npm...

MAL-2025-186212 Malicious code in comet-auth-html-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5b037c3a10e0eb5d63054a411dd6a2daeb791121c669593b5602687a52454b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

EUVD-2025-175923

Malicious code in toml-terser-webpack-plugin-process-prompts npm...

EUVD-2025-176003

Malicious code in terser-webpack-plugin-centaurus-version-duplex npm...

MAL-2025-188685 Malicious code in phoenix-perseus-mocha-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab6606c12f1d8a31b4ffa60bdd8a08643e40c577af49e628586123bd9d36ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187030 Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0fb880a3bfb6b4d32d650b9778f2bab22b66cda0b72f0639a80bccf3fcd8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...