298 matches found
Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121679
Malicious code in sqlite-yakutsk-lynx-rollup-plugin npm...
EUVD-2025-121326
Malicious code in testcafe-rollup-plugin-corvus-europa npm...
EUVD-2025-122410
Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...
MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122393
Malicious code in rollup-plugin-zenobia-cypress-nebula npm...
EUVD-2025-123435
Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides npm...
EUVD-2025-111183
Malicious code in meteor-rollup-plugin-io-carina npm...
EUVD-2025-112507
Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...
Malicious code in cors-equinox-convict-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830bba97b38273c827dfbc347dbec50ed18767cbe6e901b55fd0fa9562f540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jovian-rollup-plugin-jest-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in prettier-rollup-plugin-astro-virgo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-yonder-draco-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-async-shelljs-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...