EUVD-2025-180092

Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet npm...

EUVD-2025-178697

Malicious code in global-rollup-plugin-lightyear-thermochronology npm...

EUVD-2025-177294

Malicious code in pavo-hapi-hyperion-rollup-plugin npm...

EUVD-2025-176869

Malicious code in quantum-rollup-plugin-neuromorphic-janus npm...

Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176602

Malicious code in rollup-plugin-loglevel-archaeoastronomy-on npm...

EUVD-2025-176607

Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver npm...

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180046

Malicious code in biotechnology-apollo-rollup-plugin-nodemon npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

EUVD-2025-176601

Malicious code in rollup-plugin-octans-fomalhaut-dependencies npm...

Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176606

Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-176600

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...

Malicious code in archaeometry-rollup-plugin-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176603

Malicious code in rollup-plugin-hugo-library-biotechnology npm...

EUVD-2025-176599

Malicious code in rollup-plugin-start-galaxy-neutronstar npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...