3039 matches found
EUVD-2025-122412
Malicious code in rollup-plugin-callisto-figures-cosmos npm...
EUVD-2025-111207
Malicious code in meteor-dotenv-safe-rollup-pino-pretty npm...
EUVD-2025-112850
Malicious code in helmet-rollup-plugin-odin-pino-pretty npm...
Malicious code in wasat-rollup-plugin-barnard-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in avior-rollup-stop-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120629
Malicious code in wasat-rollup-plugin-barnard-node-config npm...
EUVD-2025-111183
Malicious code in meteor-rollup-plugin-io-carina npm...
EUVD-2025-124560
Malicious code in neptune-eris-rollup-plugin-nashira npm...
EUVD-2025-122576
Malicious code in rest-eris-norma-rollup-plugin npm...
MAL-2025-146859 Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147346 Malicious code in rest-eris-norma-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf62dbc0285b74b3bcefcc881a1cd6aae2fdae5f5a5027a8f2028f804ce385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147520 Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148124 Malicious code in spectron-regulus-superagent-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...