1618 matches found
Malicious code in eslint-enif-webpack-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114450
Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass npm...
EUVD-2025-120523
Malicious code in webpack-rimraf-eris-writable npm...
EUVD-2025-112733
Malicious code in html-webpack-plugin-zenobia-terser-sqlite npm...
EUVD-2025-123847
Malicious code in perseus-chariklo-webpack-despina npm...
Malicious code in webpack-titan-upgrade-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115392
Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...
EUVD-2025-123861
Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...
EUVD-2025-122899
Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin npm...
Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124055
Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121583
Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...
EUVD-2025-111664
Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less npm...
EUVD-2025-112116
Malicious code in jsonp-html-webpack-plugin-epimetheus-spica npm...
EUVD-2025-121681
Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin npm...
EUVD-2025-116218
Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...
EUVD-2025-113353
Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare npm...