EUVD-2025-112745

Malicious code in html-webpack-plugin-kronos-phoenix-antd npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

EUVD-2025-120948

Malicious code in unuk-iota-zenith-html-webpack-plugin npm...

EUVD-2025-120739

Malicious code in vortex-request-websockets-html-webpack-plugin npm...

EUVD-2025-120529

Malicious code in webpack-kaus-flare-rehype npm...

EUVD-2025-112734

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse npm...

EUVD-2025-114123

Malicious code in element-ui-winston-html-webpack-plugin-npm npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-112713

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-113119

Malicious code in got-ursa-css-minimizer-webpack-plugin-redis npm...

EUVD-2025-124445

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c75a1f2a4473c3bdad22140daaaab48fb2b8967e39e94cdf6b036285b6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141305 Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143739 Malicious code in iota-publish-farout-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5af19c1d6f08e7ef2fd2f4ffea93902babce362354f088e98f6484d66559a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149507 Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147094 Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc92c96d3ca99d6166dcc1bfdf45c8e4a21ea3ca0e602f88717aebed70a8c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141331 Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140930 Malicious code in commitizen-fetch-leda-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad32909ada1383cfdbbe1faf4ff59ab81ad25641643f4c43649a502a9ae0e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148548 Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...