1949 matches found
MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188142 Malicious code in mui-norma-callisto-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50dd2b2d8d78ce8e36999c312857463758a39ad904e094dc54163e473bf5c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190291 Malicious code in webpack-quantum-babel-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187372 Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76c400c13c978ef6cec8cf7e638527ede28cbd33c8bdda65e4c91e8e97c489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190287 Malicious code in webpack-borealis-paleoceanography-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf8f7f7c20f0f2447cff594b125306eb9f2baec1daf20a389df5654223f40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189659 Malicious code in start-iota-webpack-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178285
Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...
MAL-2025-189878 Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d806205b74b56ad6447e53075cc4a8f467cf38ad549070b55924b5674f905531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190288 Malicious code in webpack-dotenv-safe-avior-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef999ad1a80cec0d0e2ca09865a600eb285869e029c47714d54436be3341dbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187379 Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dde5432372bf813eb46eb9929fc1e8fbcf613a4f116a4677f9fa73a2800edb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120423
Malicious code in winston-magellan-miranda-terser-webpack-plugin npm...
EUVD-2025-120376
Malicious code in wolf-optimize-css-assets-webpack-plugin-vuepress-procyon npm...
EUVD-2025-120235
Malicious code in xenos-xenon-husky-webpack npm...
EUVD-2025-120161
Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...
EUVD-2025-120158
Malicious code in yakutsk-kastra-webpack-release-it npm...
EUVD-2025-120140
Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...