3039 matches found
Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180092
Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet npm...
EUVD-2025-178565
Malicious code in helios-fusion-rollup-command npm...
EUVD-2025-177401
Malicious code in orogeny-rollup-heka-miranda npm...
EUVD-2025-179301
Malicious code in development-rollup-pipe-koa npm...
MAL-2025-186540 Malicious code in dendrochronology-metalsmith-rollup-plutology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d0ed7e883cb7ed56a82796f786014a46174027fa73bce19f797e293167b56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188588 Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189276 Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6f9ff2255f568a5fe51812bfe0074491bde1fc7e58142a7d271a74671ed39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178626
Malicious code in gulp-rollup-plugin-carina-csv npm...
MAL-2025-189266 Malicious code in rollup-neptune-webdriver-manager-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9641ae1a94bc9e9e2736447da0d80427ac96de8cf3e3560ab39d02c7194a3db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186068 Malicious code in centaurus-test-rollup-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6148929a592e573d8d4974b55e488857355621d8e6308aabba97db6b5521aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in biotechnology-apollo-rollup-plugin-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0830b98c58ab354f9147b7c6003d2a35dd551ebee55353545da36da720098ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in algol-elektra-rollup-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186934 Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179510
Malicious code in cressida-yakutsk-zephyr-rollup npm...
EUVD-2025-122271
Malicious code in sails-lint-staged-dotenv-rollup-plugin npm...
EUVD-2025-113288
Malicious code in ganymede-titan-rollup-plugin-antares npm...
Malicious code in rollup-buffer-superagent-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...