EUVD-2025-120619

Malicious code in webdriver-manager-bootstrap-rollup-plugin-callisto npm...

Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122400

Malicious code in rollup-plugin-tool-await-stop npm...

EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

EUVD-2025-113860

Malicious code in eslint-supervisor-rollup-plugin-hapi npm...

EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-111126

Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

EUVD-2025-122395

Malicious code in rollup-plugin-xanthus-loglevel-dagda npm...

Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122403

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...

EUVD-2025-121282

Malicious code in thuban-delphinus-rollup-plugin-graphql npm...

EUVD-2025-115019

Malicious code in convict-rollup-plugin-buffer-sagitta npm...

Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116738

Malicious code in altair-rollup-plugin-jasmine-chai npm...

MAL-2025-144989 Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b234992fbe92bbd6d5b222143d1472c4d031552a7aa0877692f9837bb424228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...