MAL-2025-189270 Malicious code in rollup-plugin-firebase-geochronology-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e0281ce62a32de1725eb603807b7890d11f596aecd42507b277a31497e925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176603

Malicious code in rollup-plugin-hugo-library-biotechnology npm...

EUVD-2025-176607

Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177756

Malicious code in morgan-planckscale-rollup-plugin-void npm...

EUVD-2025-176601

Malicious code in rollup-plugin-octans-fomalhaut-dependencies npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176605

Malicious code in rollup-plugin-firebase-geochronology-version npm...

MAL-2025-189271 Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189274 Malicious code in rollup-plugin-octans-fomalhaut-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af786cbe84ba8a4f35aa3f8afa89b09b9b2ad65ba56783efdc80335e5eb0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177294

Malicious code in pavo-hapi-hyperion-rollup-plugin npm...

EUVD-2025-176604

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup npm...

EUVD-2025-176195

Malicious code in stratosphere-speleology-rollup-plugin-hapi npm...

EUVD-2025-178948

Malicious code in extremophile-ophiuchus-rollup-plugin-subscription npm...

EUVD-2025-180092

Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet npm...

Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...