EUVD-2025-176958

Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin npm...

Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176771

Malicious code in redis-acamar-terser-webpack-plugin-deneb npm...

EUVD-2025-176284

Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin npm...

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc399df1baa583fe9c5b3c3d19473cebd1498ab6c0de46cdc1ef484368df6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176889

Malicious code in pyxis-alphard-event-html-webpack-plugin npm...

EUVD-2025-177433

Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda npm...

EUVD-2025-176354

Malicious code in sirius-registry-webpack-quasar npm...

EUVD-2025-175478

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota npm...

EUVD-2025-177109

Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

EUVD-2025-177313

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton npm...

EUVD-2025-179772

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin npm...

EUVD-2025-176109

Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...

EUVD-2025-179580

Malicious code in convict-writable-webpack-cosmogenic npm...

EUVD-2025-177990

Malicious code in lyra-nebula-node-config-terser-webpack-plugin npm...

Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e48a9fd6450f06e90ee5d9956c154c4f2502f33ea2ea4855e7091ec32a7172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178548

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...