298 matches found
Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-yonder-draco-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-async-shelljs-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113486
Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin npm...
EUVD-2025-112850
Malicious code in helmet-rollup-plugin-odin-pino-pretty npm...
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-116864
Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin npm...
EUVD-2025-123032
Malicious code in pyxis-terser-dactyl-rollup-plugin npm...
EUVD-2025-123550
Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115019
Malicious code in convict-rollup-plugin-buffer-sagitta npm...
EUVD-2025-122400
Malicious code in rollup-plugin-tool-await-stop npm...
EUVD-2025-116738
Malicious code in altair-rollup-plugin-jasmine-chai npm...
EUVD-2025-121359
Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin npm...
EUVD-2025-113365
Malicious code in fusion-rollup-plugin-hexo-grus npm...
EUVD-2025-122397
Malicious code in rollup-plugin-virgo-uninstall-hercules npm...
Malicious code in csrf-rollup-plugin-halley-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...