EUVD-2025-122794

Malicious code in registry-fork-terser-webpack-plugin-rollup npm...

Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115707

Malicious code in capella-webpack-octans-postgres npm...

Malicious code in altair-playwright-webpack-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120763

Malicious code in virgo-proxima-webpack-transform npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114651

Malicious code in dactyl-webpack-loopback-winston npm...

EUVD-2025-121109

Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus npm...

Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113855

Malicious code in eslint-webpack-celeste-betelgeuse npm...

EUVD-2025-121370

Malicious code in terser-webpack-plugin-non-blocking-gemini-colors npm...

EUVD-2025-120518

Malicious code in webpack-triton-optimize-css-assets-webpack-plugin-meteor npm...

Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114665

Malicious code in dactyl-inquirer-version-webpack npm...

EUVD-2025-113503

Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides npm...

EUVD-2025-124326

Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin npm...

EUVD-2025-121367

Malicious code in terser-webpack-plugin-yonder-venus-antd npm...

EUVD-2025-112254

Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius npm...

MAL-2025-149408 Malicious code in webpack-supervisor-dotenv-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2714d08ed8aff240d888fd65a138d36e56492e01ad10970dd01de5664bd97de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144675 Malicious code in magellan-webpack-global-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545c5ada6135a1efd8ee85d3182f24385c34b4d5d449063bfdced4cdb058754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...