EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122130

Malicious code in sedna-sequelize-less-loader-rollup-plugin npm...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

EUVD-2025-122415

Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse npm...

Malicious code in rollup-plugin-europa-loopback-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de200db7e515a5961d1eb057ffb24b96548093bc9c24b3d1792511a3fa58ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111183

Malicious code in meteor-rollup-plugin-io-carina npm...

EUVD-2025-116427

Malicious code in auriga-dotenv-draco-rollup-plugin npm...

Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115555

Malicious code in centaurus-rimraf-install-rollup-plugin npm...

Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121699

Malicious code in sqlite-event-nodemon-rollup-plugin npm...

EUVD-2025-121679

Malicious code in sqlite-yakutsk-lynx-rollup-plugin npm...

Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123063

Malicious code in puppeteer-polaris-rollup-plugin-quantum npm...

EUVD-2025-121282

Malicious code in thuban-delphinus-rollup-plugin-graphql npm...

EUVD-2025-111400

Malicious code in markdown-rollup-plugin-quark-zephyr npm...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...