279 matches found
EUVD-2025-123435
Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides npm...
EUVD-2025-121699
Malicious code in sqlite-event-nodemon-rollup-plugin npm...
EUVD-2025-111400
Malicious code in markdown-rollup-plugin-quark-zephyr npm...
Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-yonder-draco-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120629
Malicious code in wasat-rollup-plugin-barnard-node-config npm...
Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fusion-rollup-plugin-hexo-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114813
Malicious code in csrf-rollup-plugin-halley-lynx npm...
Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112507
Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...
EUVD-2025-122412
Malicious code in rollup-plugin-callisto-figures-cosmos npm...
EUVD-2025-112850
Malicious code in helmet-rollup-plugin-odin-pino-pretty npm...
Malicious code in wasat-rollup-plugin-barnard-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123366
Malicious code in process-local-jest-rollup-plugin npm...
Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...