EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

EUVD-2025-122407

Malicious code in rollup-plugin-event-reveal-md-cors npm...

Malicious code in cors-equinox-convict-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830bba97b38273c827dfbc347dbec50ed18767cbe6e901b55fd0fa9562f540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115097

Malicious code in concurrently-rollup-plugin-pino-pretty-mui npm...

EUVD-2025-113569

Malicious code in fomalhaut-hugo-rollup-plugin-concurrently npm...

Malicious code in rollup-plugin-yonder-draco-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123765

Malicious code in phoebe-link-changelog-rollup-plugin npm...

EUVD-2025-123550

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...

EUVD-2025-121710

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation npm...

EUVD-2025-123420

Malicious code in prettier-rollup-plugin-astro-virgo npm...

EUVD-2025-120619

Malicious code in webdriver-manager-bootstrap-rollup-plugin-callisto npm...

EUVD-2025-112615

Malicious code in hyperion-rollup-plugin-loop-testcafe npm...

EUVD-2025-122408

Malicious code in rollup-plugin-europa-loopback-dorado npm...

EUVD-2025-120629

Malicious code in wasat-rollup-plugin-barnard-node-config npm...

Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121326

Malicious code in testcafe-rollup-plugin-corvus-europa npm...

EUVD-2025-113860

Malicious code in eslint-supervisor-rollup-plugin-hapi npm...

EUVD-2025-122398

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...

Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e16c85a8e07e683a144c5150466a5ba5f05cfc7f6c4bcbf198007084ff76e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...