EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

MAL-2025-147526 Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148124 Malicious code in spectron-regulus-superagent-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147518 Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982c0a26cbd0841c61c8ff2c52e83daa73d1549af5ddfa81fcb4aa835fdf2b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148063 Malicious code in socketio-rollup-plugin-vuetify-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122396

Malicious code in rollup-plugin-wolf-markdownlint-pegasus npm...

EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2020-0530

Malware in sbrugna...

EUVD-2020-0573

Malware in sbrugna...

EUVD-2021-0942

Malware in sbrugna...

Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)

The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...

Malicious code in rollup-plugin-despina-borealis-subduction (npm)

The package rollup-plugin-despina-borealis-subduction was found to contain malicious code...

Malicious code in rollup-plugin-geochemistry-fomalhaut-gulp (npm)

The package rollup-plugin-geochemistry-fomalhaut-gulp was found to contain malicious code...

Malicious code in sedna-regulus-rollup-plugin-phoebe (npm)

The package sedna-regulus-rollup-plugin-phoebe was found to contain malicious code...

Malicious code in yaml-transform-rollup-plugin-dione (npm)

The package yaml-transform-rollup-plugin-dione was found to contain malicious code...

MAL-2025-45903 Malicious code in rollup-plugin-despina-borealis-subduction (npm)

The package rollup-plugin-despina-borealis-subduction was found to contain malicious code...

Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...

MAL-2025-45905 Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...