270 matches found
EUVD-2025-123435
Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides npm...
Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miranda-ganymede-rollup-plugin-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d426fe4273e7ba4b8bb43d473c05095124efe85266ca7013af3abef0221260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123368
Malicious code in process-install-rollup-plugin-readable npm...
EUVD-2025-111126
Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin npm...
Malicious code in rollup-plugin-async-shelljs-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122403
Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...
EUVD-2025-123863
Malicious code in pegasus-taurus-elektra-rollup-plugin npm...
EUVD-2025-122399
Malicious code in rollup-plugin-ultra-ganymede-vega npm...
EUVD-2025-123952
Malicious code in parcel-rollup-plugin-andromeda-betelgeuse npm...
EUVD-2025-112507
Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...
EUVD-2025-122394
Malicious code in rollup-plugin-yonder-draco-fork npm...
Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123032
Malicious code in pyxis-terser-dactyl-rollup-plugin npm...
EUVD-2025-115593
Malicious code in celeste-mutation-private-rollup-plugin npm...
Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...