Malicious code in rollup-barnard-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d503b1e2061b46d61e17f201e8dbc899cb29441b3bdac807ce5d1e4707ef79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115532

Malicious code in ceres-rollup-warp-helios npm...

EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124272

Malicious code in norma-rollup-websockets-draco npm...

EUVD-2025-116795

Malicious code in algol-rollup-uninstall-atlas npm...

EUVD-2025-122392

Malicious code in rollup-postcss-loader-xanadu-relay npm...

EUVD-2025-116739

Malicious code in altair-rollup-bootstrap-webdriver-manager npm...

EUVD-2025-112430

Malicious code in install-rollup-spectron-webdriver-proxima npm...

EUVD-2025-122425

Malicious code in rollup-gatsby-carpo-json npm...

EUVD-2025-122423

Malicious code in rollup-inquirer-draco-rigel npm...

Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115687

Malicious code in carina-phoebe-materialize-rollup npm...

Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147501 Malicious code in rollup-lynx-halley-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa72a4e4403fc64b5e80a29aa6fe134a65347485b04d344bf684201c40dae9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146960 Malicious code in quasar-rollup-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122419

Malicious code in rollup-mui-canopus-phoenix npm...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147525 Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...