3039 matches found
Malicious code in archaeometry-rollup-plugin-astro-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180049
Malicious code in biosignature-rollup-polaris-boson npm...
EUVD-2025-176500
Malicious code in schema-terser-prompts-rollup npm...
EUVD-2025-178500
Malicious code in hugo-build-configstore-rollup-plugin npm...
EUVD-2025-176600
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...
EUVD-2025-175918
Malicious code in tool-pino-xenos-rollup npm...
EUVD-2025-178697
Malicious code in global-rollup-plugin-lightyear-thermochronology npm...
Malicious code in heka-markdownlint-rollup-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176869
Malicious code in quantum-rollup-plugin-neuromorphic-janus npm...
Malicious code in tool-pino-xenos-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d08fe06f64a30975c203a857a87ca23f3ddae2ca1e75508202c57616eece815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188185 Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189270 Malicious code in rollup-plugin-firebase-geochronology-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e0281ce62a32de1725eb603807b7890d11f596aecd42507b277a31497e925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187214 Malicious code in graviton-sociobiology-tailwindcss-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7952f07b66118ba76773e8f7827c06eb1e958d529bd65938ff48c0bfd80c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189269 Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961e8a7cfffd287292e217d76e3379b062907280f409cf0ea9836155a60343e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190304 Malicious code in weywot-resolvers-vuepress-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdb11770ab86d295bfb45a4a377949b744a249875509122d45dee4c8f543e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180459
Malicious code in algol-elektra-rollup-style-loader npm...
Malicious code in sails-rollup-unuk-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33fd2b89cf4ed018cf7deea569ccd3b18d23b7b1f0990df18111c52130666ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...