MAL-2025-189271 Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188185 Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176602

Malicious code in rollup-plugin-loglevel-archaeoastronomy-on npm...

EUVD-2025-176605

Malicious code in rollup-plugin-firebase-geochronology-version npm...

EUVD-2025-176604

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup npm...

EUVD-2025-180473

Malicious code in aldebaran-halley-eris-rollup-plugin npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-176917

Malicious code in publish-superagent-rollup-plugin-commitlint npm...

Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

EUVD-2025-177430

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...

MAL-2025-189270 Malicious code in rollup-plugin-firebase-geochronology-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e0281ce62a32de1725eb603807b7890d11f596aecd42507b277a31497e925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178500

Malicious code in hugo-build-configstore-rollup-plugin npm...

MAL-2025-188588 Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189269 Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961e8a7cfffd287292e217d76e3379b062907280f409cf0ea9836155a60343e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178697

Malicious code in global-rollup-plugin-lightyear-thermochronology npm...

Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112615

Malicious code in hyperion-rollup-plugin-loop-testcafe npm...

Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...