Malicious code in canopus-rollup-semantic-ui-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103f0a8650f4e9f282e4b3f6b488dc1bca436344cd8eaa9a147741e10b363f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122429

Malicious code in rollup-buffer-superagent-start npm...

EUVD-2025-115687

Malicious code in carina-phoebe-materialize-rollup npm...

EUVD-2025-122424

Malicious code in rollup-global-indus-testcafe npm...

EUVD-2025-122430

Malicious code in rollup-bellatrix-telesto-jasmine npm...

EUVD-2025-122405

Malicious code in rollup-plugin-nashira-vuepress-rehype npm...

Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116144

Malicious code in bellatrix-spica-rollup-forever npm...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147536 Malicious code in rollup-taurus-antd-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111122

Malicious code in mini-css-extract-plugin-release-it-antares-rollup npm...

Malicious code in rollup-supervisor-fornax-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61010f916d4168f9195bd75c485c5d125f4cfa390ab502895dfa7938f1a20b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115532

Malicious code in ceres-rollup-warp-helios npm...

Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112430

Malicious code in install-rollup-spectron-webdriver-proxima npm...

EUVD-2025-122389

Malicious code in rollup-spectron-acamar-cli npm...

EUVD-2025-124337

Malicious code in nodemon-miranda-rollup-kastra npm...

EUVD-2025-124328

Malicious code in nodemon-rollup-dactyl-native npm...