298 matches found
EUVD-2025-113569
Malicious code in fomalhaut-hugo-rollup-plugin-concurrently npm...
EUVD-2025-114813
Malicious code in csrf-rollup-plugin-halley-lynx npm...
EUVD-2025-115593
Malicious code in celeste-mutation-private-rollup-plugin npm...
EUVD-2025-115097
Malicious code in concurrently-rollup-plugin-pino-pretty-mui npm...
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-116864
Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin npm...
EUVD-2025-123032
Malicious code in pyxis-terser-dactyl-rollup-plugin npm...
EUVD-2025-123550
Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115019
Malicious code in convict-rollup-plugin-buffer-sagitta npm...
EUVD-2025-122400
Malicious code in rollup-plugin-tool-await-stop npm...
EUVD-2025-116738
Malicious code in altair-rollup-plugin-jasmine-chai npm...
EUVD-2025-121359
Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin npm...
EUVD-2025-113365
Malicious code in fusion-rollup-plugin-hexo-grus npm...
EUVD-2025-122397
Malicious code in rollup-plugin-virgo-uninstall-hercules npm...
Malicious code in csrf-rollup-plugin-halley-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116427
Malicious code in auriga-dotenv-draco-rollup-plugin npm...
Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...