3039 matches found
MAL-2025-143633 Malicious code in init-titan-rollup-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8d6c574797e2e2e679ad497bd80547d1a272b15b1e582052f42f82f871c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147515 Malicious code in rollup-plugin-event-reveal-md-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147500 Malicious code in rollup-izar-polaris-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3434263b89a3793bc4b2384fbb40a07306dd0fb9cc2976644bab0b3641ad3ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147503 Malicious code in rollup-mui-canopus-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da036f3d7323a4315db349f89af20737016fc10490dfc341a138c1357c5b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147533 Malicious code in rollup-spectron-acamar-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-rollup-package-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143324 Malicious code in hermes-relay-mensa-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7840f7cacb1472b789652d724c055490d06c02148c37251adb38ffaeff035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140681 Malicious code in changelog-rollup-proxima-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149208 Malicious code in vuetify-europa-rollup-cygnus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b971b635734164859f470126e1df9acbda4112807b2bcd956b710fd2280676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124337
Malicious code in nodemon-miranda-rollup-kastra npm...
Malicious code in loglevel-postcss-pm2-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122404
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...
EUVD-2025-122417
Malicious code in rollup-nova-inquirer-magellan npm...
EUVD-2025-122429
Malicious code in rollup-buffer-superagent-start npm...
EUVD-2025-114003
Malicious code in epimetheus-rigel-rollup-schema npm...
Malicious code in rollup-plugin-yonder-draco-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...