1950 matches found
MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147560 Malicious code in sadr-envconfig-auth0-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144486 Malicious code in local-fork-postgres-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55b74dedb1f55e866a3e57ff1b1150151ebfce27b4a2d1e0fa1033db37c196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144913 Malicious code in meteor-html-webpack-plugin-mui-selenium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ba44be2ccd673c3f19ceb7a542f761f31250400b8f3caa7ffa5327a7e58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115783
Malicious code in callback-webpack-halley-eridanus npm...
EUVD-2025-124445
Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...
Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c8f5ff036967a5e3b226fc20d99ae1fecf14ea93e18b4e9863c82e5c82e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111785
Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...
EUVD-2025-123260
Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...
EUVD-2025-120739
Malicious code in vortex-request-websockets-html-webpack-plugin npm...
EUVD-2025-123530
Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...
Malicious code in fornax-webpack-pyxis-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120536
Malicious code in webpack-colors-luna-electron npm...
EUVD-2025-122646
Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...