Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c8f5ff036967a5e3b226fc20d99ae1fecf14ea93e18b4e9863c82e5c82e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111785

Malicious code in less-loader-quantum-miranda-html-webpack-plugin npm...

EUVD-2025-123260

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...

EUVD-2025-120739

Malicious code in vortex-request-websockets-html-webpack-plugin npm...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120536

Malicious code in webpack-colors-luna-electron npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

EUVD-2025-121847

Malicious code in solis-levels-html-webpack-plugin-release-it npm...

EUVD-2025-120104

Malicious code in yonder-acamar-terser-webpack-plugin-ariel npm...

EUVD-2025-120531

Malicious code in webpack-global-concurrently-venus npm...

EUVD-2025-123187

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...

EUVD-2025-120527

Malicious code in webpack-perseus-version-hyperion npm...

EUVD-2025-120525

Malicious code in webpack-prettier-stylelint-indus-version npm...

EUVD-2025-120524

Malicious code in webpack-public-uglify-js-atlas npm...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

MAL-2025-141243 Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a46a9c2846a091e28a3a4dc8c51bc71bdde5de64a5745a8b0b0b66988ee9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148152 Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f124e4d557c8feabc6de44830d46d279b20eda791ae7444d095204eba1dc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143399 Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cbb809a5a462eecb562ebf259496a3417030ea7068dd248d7c76664b049056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...