Malicious code in rollup-plugin-fusion-axios-grunt (npm)

The package rollup-plugin-fusion-axios-grunt was found to contain malicious code...

MAL-2025-32359 Malicious code in rollup-plugin-graviton-library-sublimation (npm)

The package rollup-plugin-graviton-library-sublimation was found to contain malicious code...

MAL-2025-32361 Malicious code in rollup-plugin-odin-xenos-ophiuchus (npm)

The package rollup-plugin-odin-xenos-ophiuchus was found to contain malicious code...

MAL-2025-32358 Malicious code in rollup-plugin-fusion-axios-grunt (npm)

The package rollup-plugin-fusion-axios-grunt was found to contain malicious code...

MAL-2025-31410 Malicious code in quito-puppeteer-hyperion-rollup-plugin (npm)

The package quito-puppeteer-hyperion-rollup-plugin was found to contain malicious code...

MAL-2025-22360 Malicious code in helios-ultra-rollup-plugin-gridsome (npm)

The package helios-ultra-rollup-plugin-gridsome was found to contain malicious code...

MAL-2025-32362 Malicious code in rollup-plugin-raptor-compiler (npm)

The package rollup-plugin-raptor-compiler was found to contain malicious code...

Malware in rollup-plugin-remove-import

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in rollup-plugin-hotreload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f1926b00e34e20d1f36662b0093d46104a516288d7edd6faf52f4ce78a039 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11081 Malicious code in rollup-plugin-hotreload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f1926b00e34e20d1f36662b0093d46104a516288d7edd6faf52f4ce78a039 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in rollup-plugin-hotreload

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in rollup-plugin-amd-output-enhance

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10783 Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rollup-plugin-lnode-desolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acf72eab56a54c7614500ece2ebfc40968084756762db5bffb1f207950dd083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5837 Malicious code in rollup-plugin-lnode-desolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acf72eab56a54c7614500ece2ebfc40968084756762db5bffb1f207950dd083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5840 Malicious code in rollup-pulgin-comsonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e311c145a9753f0b9cb137dddc9e3bffb27b6cb502240c2b697d2028267ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-688 Malicious code in @ucs-private/rollup-plugin-dts-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae7ccf37aa51057551072c84cb55e3bc7c73e6139db593a7c3c45970480257a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jmfe/rollup-plugin-jss-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52672a639a43fdd1e6fff4c8b9ac6aa79f1f17fc8ec4457ca1f1dc09790bca90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Path traversal in rollup-plugin-serve

Overview Path traversal in rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation. Recommendation Upgrade to version 1.0.2 or later References - CVE - GitHub Advisory...