298 matches found
MAL-2025-148063 Malicious code in socketio-rollup-plugin-vuetify-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147527 Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121585
Malicious code in style-loader-rollup-plugin-izar-phoebe npm...
EUVD-2025-113365
Malicious code in fusion-rollup-plugin-hexo-grus npm...
Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122398
Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...
Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122405
Malicious code in rollup-plugin-nashira-vuepress-rehype npm...
EUVD-2025-122435
Malicious code in rocket-yaml-vortex-rollup-plugin npm...
EUVD-2025-123765
Malicious code in phoebe-link-changelog-rollup-plugin npm...
EUVD-2025-122397
Malicious code in rollup-plugin-virgo-uninstall-hercules npm...
EUVD-2025-121359
Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin npm...
MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142543 Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74d06ffce784053f018ae7e3a21129547d5cdfba1edf9f5677c976fc3e6855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-europa-loopback-dorado (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de200db7e515a5961d1eb057ffb24b96548093bc9c24b3d1792511a3fa58ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122414
Malicious code in rollup-plugin-antares-pulsar-dynamo npm...
MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...