EUVD-2025-123952

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse npm...

EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

EUVD-2025-122394

Malicious code in rollup-plugin-yonder-draco-fork npm...

Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122434

Malicious code in rollup-atlas-electron-pino npm...

EUVD-2025-115154

Malicious code in commitlint-blaze-rollup-cross-env npm...

EUVD-2025-124883

Malicious code in miranda-ganymede-rollup-plugin-grus npm...

EUVD-2025-116319

Malicious code in avior-rollup-stop-zephyr npm...

EUVD-2025-112154

Malicious code in jovian-rollup-plugin-jest-polaris npm...

EUVD-2025-121384

Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin npm...

EUVD-2025-120729

Malicious code in vuepress-rollup-plugin-bootes-polaris npm...

EUVD-2025-122420

Malicious code in rollup-magellan-hapi-puppeteer npm...

EUVD-2025-122425

Malicious code in rollup-gatsby-carpo-json npm...

Malicious code in avior-rollup-stop-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123032

Malicious code in pyxis-terser-dactyl-rollup-plugin npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

EUVD-2025-116635

Malicious code in antd-sagitta-meissa-rollup npm...

Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...