EUVD-2025-114785

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda npm...

EUVD-2025-123238

Malicious code in protractor-europa-elektra-html-webpack-plugin npm...

EUVD-2025-124065

Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa npm...

EUVD-2025-124265

Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor npm...

MAL-2025-144120 Malicious code in karma-spawn-webpack-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ad02d4f568f1f8a2b8334848d681a29dba0cdb833d11bd39f564c54fbe6bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149261 Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143358 Malicious code in html-webpack-plugin-csrf-link-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922ca18a44731d301d1740519b17256d39a472601f460a03933bf194565d2642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149394 Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143365 Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bdd909093acd269050ee6c34672fc6bcb6d1f7880dc777e24bb979bea04124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122631

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard npm...

EUVD-2025-116542

Malicious code in aquarius-webpack-apollo-xanthus npm...

EUVD-2025-112738

Malicious code in html-webpack-plugin-transform-google-transport npm...

Malicious code in webpack-init-uninstall-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6471c91382e04439bad5add4efea64590c4612d7a34a262d27a4609557ada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149408 Malicious code in webpack-supervisor-dotenv-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2714d08ed8aff240d888fd65a138d36e56492e01ad10970dd01de5664bd97de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143375 Malicious code in html-webpack-plugin-upgrade-remark-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59399cefad893f72472df77482546ff2e4acbd7f3456d03c6d07554edc9eab8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143364 Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...