EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-122408

Malicious code in rollup-plugin-europa-loopback-dorado npm...

EUVD-2025-122402

Malicious code in rollup-plugin-solis-nashira-ophiuchus npm...

EUVD-2025-122401

Malicious code in rollup-plugin-style-loader-fornax-mdx npm...

EUVD-2025-122399

Malicious code in rollup-plugin-ultra-ganymede-vega npm...

EUVD-2025-122396

Malicious code in rollup-plugin-wolf-markdownlint-pegasus npm...

EUVD-2025-122395

Malicious code in rollup-plugin-xanthus-loglevel-dagda npm...

EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-123420

Malicious code in prettier-rollup-plugin-astro-virgo npm...

EUVD-2025-123063

Malicious code in puppeteer-polaris-rollup-plugin-quantum npm...

Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123366

Malicious code in process-local-jest-rollup-plugin npm...

Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122576

Malicious code in rest-eris-norma-rollup-plugin npm...

EUVD-2025-123368

Malicious code in process-install-rollup-plugin-readable npm...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

EUVD-2025-122403

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...