298 matches found
EUVD-2025-115593
Malicious code in celeste-mutation-private-rollup-plugin npm...
EUVD-2025-115097
Malicious code in concurrently-rollup-plugin-pino-pretty-mui npm...
EUVD-2025-115019
Malicious code in convict-rollup-plugin-buffer-sagitta npm...
EUVD-2025-116738
Malicious code in altair-rollup-plugin-jasmine-chai npm...
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-116864
Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin npm...
EUVD-2025-121265
Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...
EUVD-2025-123032
Malicious code in pyxis-terser-dactyl-rollup-plugin npm...
EUVD-2025-123550
Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114744
Malicious code in cygnus-draco-local-rollup-plugin npm...
MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147346 Malicious code in rest-eris-norma-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf62dbc0285b74b3bcefcc881a1cd6aae2fdae5f5a5027a8f2028f804ce385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122411
Malicious code in rollup-plugin-changelog-oberon-nextjs npm...
Malicious code in rollup-plugin-tool-await-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116427
Malicious code in auriga-dotenv-draco-rollup-plugin npm...