298 matches found
EUVD-2025-123032
Malicious code in pyxis-terser-dactyl-rollup-plugin npm...
EUVD-2025-123550
Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147520 Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144989 Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b234992fbe92bbd6d5b222143d1472c4d031552a7aa0877692f9837bb424228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147517 Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148602 Malicious code in testcafe-rollup-plugin-corvus-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fddcde5015e0fe42d0e3748a46c260942439e93f59eb180f802176af209eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122411
Malicious code in rollup-plugin-changelog-oberon-nextjs npm...
Malicious code in rollup-plugin-tool-await-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116427
Malicious code in auriga-dotenv-draco-rollup-plugin npm...
EUVD-2025-112615
Malicious code in hyperion-rollup-plugin-loop-testcafe npm...
EUVD-2025-123952
Malicious code in parcel-rollup-plugin-andromeda-betelgeuse npm...
EUVD-2025-123863
Malicious code in pegasus-taurus-elektra-rollup-plugin npm...
EUVD-2025-122412
Malicious code in rollup-plugin-callisto-figures-cosmos npm...
EUVD-2025-122394
Malicious code in rollup-plugin-yonder-draco-fork npm...
EUVD-2025-122406
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion npm...
MAL-2025-147518 Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982c0a26cbd0841c61c8ff2c52e83daa73d1549af5ddfa81fcb4aa835fdf2b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...