Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116747

Malicious code in altair-meteor-rollup-solis npm...

EUVD-2025-111183

Malicious code in meteor-rollup-plugin-io-carina npm...

MAL-2025-16322 Malicious code in build-dendrochronology-meteor-rollup (npm)

The package build-dendrochronology-meteor-rollup was found to contain malicious code...