EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-113486

Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin npm...

EUVD-2025-122130

Malicious code in sedna-sequelize-less-loader-rollup-plugin npm...

Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115589

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa npm...

EUVD-2025-111619

Malicious code in local-relay-arcturus-rollup npm...

EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-116738

Malicious code in altair-rollup-plugin-jasmine-chai npm...

Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-122430

Malicious code in rollup-bellatrix-telesto-jasmine npm...

EUVD-2025-111126

Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin npm...

EUVD-2025-116635

Malicious code in antd-sagitta-meissa-rollup npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

EUVD-2025-115953

Malicious code in buffer-airbnb-rollup-plugin-aether npm...

EUVD-2025-123273

Malicious code in promise-rollup-miranda-nodemon npm...

EUVD-2025-123177

Malicious code in proxima-terser-webpack-plugin-materialize-rollup npm...

EUVD-2025-122432

Malicious code in rollup-barnard-chakra-ui-flare npm...

Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...