EUVD-2025-115953

Malicious code in buffer-airbnb-rollup-plugin-aether npm...

EUVD-2025-112480

Malicious code in init-titan-rollup-sagitta npm...

EUVD-2025-122411

Malicious code in rollup-plugin-changelog-oberon-nextjs npm...

EUVD-2025-120721

Malicious code in vuetify-europa-rollup-cygnus npm...

EUVD-2025-114686

Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch npm...

EUVD-2025-113288

Malicious code in ganymede-titan-rollup-plugin-antares npm...

EUVD-2025-122417

Malicious code in rollup-nova-inquirer-magellan npm...

EUVD-2025-122385

Malicious code in rollup-terser-local-neptune npm...

Malicious code in cygnus-umbriel-inquirer-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115197

Malicious code in command-markdown-pdf-rollup-plugin-webdriverio npm...

EUVD-2025-124883

Malicious code in miranda-ganymede-rollup-plugin-grus npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

EUVD-2025-121359

Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin npm...

EUVD-2025-122271

Malicious code in sails-lint-staged-dotenv-rollup-plugin npm...

EUVD-2025-111971

Malicious code in kaus-eris-regulus-rollup npm...

EUVD-2025-122421

Malicious code in rollup-lynx-halley-local npm...

EUVD-2025-121949

Malicious code in sirius-rollup-despina-meissa npm...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142250 Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...