270 matches found
EUVD-2025-176195
Malicious code in stratosphere-speleology-rollup-plugin-hapi npm...
EUVD-2025-176602
Malicious code in rollup-plugin-loglevel-archaeoastronomy-on npm...
EUVD-2025-176606
Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...
EUVD-2025-176607
Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver npm...
EUVD-2025-177294
Malicious code in pavo-hapi-hyperion-rollup-plugin npm...
EUVD-2025-178697
Malicious code in global-rollup-plugin-lightyear-thermochronology npm...
EUVD-2025-176604
Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup npm...
EUVD-2025-176605
Malicious code in rollup-plugin-firebase-geochronology-version npm...
EUVD-2025-178948
Malicious code in extremophile-ophiuchus-rollup-plugin-subscription npm...
Malicious code in archaeometry-rollup-plugin-astro-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176599
Malicious code in rollup-plugin-start-galaxy-neutronstar npm...
EUVD-2025-176603
Malicious code in rollup-plugin-hugo-library-biotechnology npm...
EUVD-2025-176601
Malicious code in rollup-plugin-octans-fomalhaut-dependencies npm...
EUVD-2025-179515
Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...
EUVD-2025-176600
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...
Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...