2989 matches found
EUVD-2025-123150
Malicious code in publish-achernar-rollup-plugin-miranda npm...
EUVD-2025-122409
Malicious code in rollup-plugin-eridanus-blitz-jsonp npm...
EUVD-2025-122407
Malicious code in rollup-plugin-event-reveal-md-cors npm...
EUVD-2025-122397
Malicious code in rollup-plugin-virgo-uninstall-hercules npm...
Malicious code in bootstrap-rollup-figures-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122414
Malicious code in rollup-plugin-antares-pulsar-dynamo npm...
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122576
Malicious code in rest-eris-norma-rollup-plugin npm...
EUVD-2025-123652
Malicious code in pipe-release-it-hermes-rollup-plugin npm...
Malicious code in meteor-rollup-plugin-io-carina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115197
Malicious code in command-markdown-pdf-rollup-plugin-webdriverio npm...
EUVD-2025-122271
Malicious code in sails-lint-staged-dotenv-rollup-plugin npm...
Malicious code in loglevel-postcss-pm2-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111971
Malicious code in kaus-eris-regulus-rollup npm...
EUVD-2025-116795
Malicious code in algol-rollup-uninstall-atlas npm...
EUVD-2025-114686
Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch npm...
EUVD-2025-122387
Malicious code in rollup-supervisor-fornax-vortex npm...