Malicious code in avior-rollup-stop-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123032

Malicious code in pyxis-terser-dactyl-rollup-plugin npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

EUVD-2025-116635

Malicious code in antd-sagitta-meissa-rollup npm...

Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114813

Malicious code in csrf-rollup-plugin-halley-lynx npm...

EUVD-2025-122396

Malicious code in rollup-plugin-wolf-markdownlint-pegasus npm...

EUVD-2025-122402

Malicious code in rollup-plugin-solis-nashira-ophiuchus npm...

Malicious code in rollup-plugin-tool-await-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122395

Malicious code in rollup-plugin-xanthus-loglevel-dagda npm...

EUVD-2025-122406

Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion npm...

EUVD-2025-122401

Malicious code in rollup-plugin-style-loader-fornax-mdx npm...

EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

EUVD-2025-113365

Malicious code in fusion-rollup-plugin-hexo-grus npm...

Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122400

Malicious code in rollup-plugin-tool-await-stop npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

EUVD-2025-122393

Malicious code in rollup-plugin-zenobia-cypress-nebula npm...