EUVD-2025-124364

Malicious code in node-sass-webpack-yonder-husky npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-124157

Malicious code in octans-command-html-webpack-plugin-build npm...

EUVD-2025-116472

Malicious code in async-nightwatch-auriga-html-webpack-plugin npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112908

Malicious code in heka-exec-terser-webpack-plugin-start npm...

EUVD-2025-113796

Malicious code in event-html-webpack-plugin-json-sqlite npm...

EUVD-2025-120795

Malicious code in version-firebase-yildun-terser-webpack-plugin npm...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

EUVD-2025-115430

Malicious code in changelog-pino-pretty-webpack-bellatrix npm...

EUVD-2025-114847

Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...

EUVD-2025-121650

Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...

EUVD-2025-114778

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse npm...

Malicious code in webpack-public-uglify-js-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92633050fb8adf6a74a175f582df02a6039d7469d7d6b33ebfc02ab978a9fbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120516

Malicious code in webpack-wasat-pyxis-json npm...

EUVD-2025-111210

Malicious code in meteor-corvus-heka-terser-webpack-plugin npm...

MAL-2025-145489 Malicious code in nightwatch-terser-webpack-plugin-auth-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8330b970ea27a9a8326babaa86a72618b895c2a775a610dbb6a8d80ff93ff11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149412 Malicious code in webpack-vuetify-prompts-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc205f3c39b95556edfd8a57a59164599cc6c819582fc203fc01257b8ac60259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...