EUVD-2025-123435

Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides npm...

EUVD-2025-122415

Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse npm...

EUVD-2025-121699

Malicious code in sqlite-event-nodemon-rollup-plugin npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

EUVD-2025-120629

Malicious code in wasat-rollup-plugin-barnard-node-config npm...

Malicious code in rollup-plugin-yonder-draco-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123150

Malicious code in publish-achernar-rollup-plugin-miranda npm...

EUVD-2025-122408

Malicious code in rollup-plugin-europa-loopback-dorado npm...

Malicious code in rollup-plugin-tool-await-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-ganymede-rollup-plugin-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d426fe4273e7ba4b8bb43d473c05095124efe85266ca7013af3abef0221260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122412

Malicious code in rollup-plugin-callisto-figures-cosmos npm...

Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122393

Malicious code in rollup-plugin-zenobia-cypress-nebula npm...

Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123366

Malicious code in process-local-jest-rollup-plugin npm...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147520 Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147517 Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...