3039 matches found
Malicious code in rollup-eclipse-equinox-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122404
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...
EUVD-2025-112903
Malicious code in heka-nebula-rollup-plugin-inquirer npm...
EUVD-2025-115262
Malicious code in colors-csrf-rollup-prettier-plugin-markdown npm...
Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122389
Malicious code in rollup-spectron-acamar-cli npm...
EUVD-2025-123550
Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...
Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112154
Malicious code in jovian-rollup-plugin-jest-polaris npm...
EUVD-2025-122421
Malicious code in rollup-lynx-halley-local npm...
Malicious code in lynx-rollup-centaurus-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122409
Malicious code in rollup-plugin-eridanus-blitz-jsonp npm...
EUVD-2025-121265
Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...
EUVD-2025-123863
Malicious code in pegasus-taurus-elektra-rollup-plugin npm...
EUVD-2025-113365
Malicious code in fusion-rollup-plugin-hexo-grus npm...
EUVD-2025-123368
Malicious code in process-install-rollup-plugin-readable npm...
Malicious code in rollup-inquirer-draco-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06568ff8c9b5b8129a7f413673f0334f93785d140530e9711b957f467e793fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loglevel-postcss-pm2-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...