EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-121326

Malicious code in testcafe-rollup-plugin-corvus-europa npm...

MAL-2025-147530 Malicious code in rollup-postcss-loader-xanadu-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f558dd12ed39569dd372e118be9afd8a3636ac8fdaff883749c0113325e68b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149560 Malicious code in wolf-pyxis-rollup-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147496 Malicious code in rollup-ganymede-impulse-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147509 Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146859 Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140151 Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141296 Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149208 Malicious code in vuetify-europa-rollup-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b971b635734164859f470126e1df9acbda4112807b2bcd956b710fd2280676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

MAL-2025-147533 Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122407

Malicious code in rollup-plugin-event-reveal-md-cors npm...

EUVD-2025-120629

Malicious code in wasat-rollup-plugin-barnard-node-config npm...

Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-ganymede-rollup-plugin-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d426fe4273e7ba4b8bb43d473c05095124efe85266ca7013af3abef0221260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...