EUVD-2025-122576

Malicious code in rest-eris-norma-rollup-plugin npm...

MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147522 Malicious code in rollup-plugin-tool-await-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121585

Malicious code in style-loader-rollup-plugin-izar-phoebe npm...

MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147525 Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141296 Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147526 Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148124 Malicious code in spectron-regulus-superagent-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147527 Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147515 Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140151 Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147520 Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...