Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123952

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse npm...

Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123863

Malicious code in pegasus-taurus-elektra-rollup-plugin npm...

EUVD-2025-122397

Malicious code in rollup-plugin-virgo-uninstall-hercules npm...

EUVD-2025-121326

Malicious code in testcafe-rollup-plugin-corvus-europa npm...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

EUVD-2025-123550

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...

EUVD-2025-123765

Malicious code in phoebe-link-changelog-rollup-plugin npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121679

Malicious code in sqlite-yakutsk-lynx-rollup-plugin npm...

EUVD-2025-112615

Malicious code in hyperion-rollup-plugin-loop-testcafe npm...

MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147515 Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147522 Malicious code in rollup-plugin-tool-await-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...