EUVD-2025-176607

Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver npm...

EUVD-2025-176609

Malicious code in rollup-neptune-webdriver-manager-eslint-plugin npm...

EUVD-2025-176601

Malicious code in rollup-plugin-octans-fomalhaut-dependencies npm...

EUVD-2025-177784

Malicious code in module-biomimicry-rollup-comet npm...

EUVD-2025-176543

Malicious code in sails-rollup-unuk-xo npm...

EUVD-2025-180535

Malicious code in abiogenesis-airbnb-supernova-rollup npm...

EUVD-2025-176603

Malicious code in rollup-plugin-hugo-library-biotechnology npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

EUVD-2025-176605

Malicious code in rollup-plugin-firebase-geochronology-version npm...

EUVD-2025-179814

Malicious code in centaurus-test-rollup-webdriver-mocha npm...

EUVD-2025-177115

Malicious code in polaris-backend-rollup-asthenosphere npm...

EUVD-2025-175437

Malicious code in yonder-rollup-dynamo-build npm...

EUVD-2025-177583

Malicious code in nightwatch-ursa-rollup-plugin-slidev npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-177944

Malicious code in markdownlint-rollup-loglevel-toml npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...

MAL-2025-189267 Malicious code in rollup-nova-wavefunction-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a71178046d6bba4cd289f92d4a80c4b5b2938521d5c4be7a784b9de70d0b722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189274 Malicious code in rollup-plugin-octans-fomalhaut-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af786cbe84ba8a4f35aa3f8afa89b09b9b2ad65ba56783efdc80335e5eb0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...