EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

EUVD-2025-122397

Malicious code in rollup-plugin-virgo-uninstall-hercules npm...

EUVD-2025-122400

Malicious code in rollup-plugin-tool-await-stop npm...

EUVD-2025-122394

Malicious code in rollup-plugin-yonder-draco-fork npm...

EUVD-2025-122393

Malicious code in rollup-plugin-zenobia-cypress-nebula npm...

EUVD-2025-116427

Malicious code in auriga-dotenv-draco-rollup-plugin npm...

EUVD-2025-121384

Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin npm...

EUVD-2025-122414

Malicious code in rollup-plugin-antares-pulsar-dynamo npm...

EUVD-2025-122409

Malicious code in rollup-plugin-eridanus-blitz-jsonp npm...

EUVD-2025-122407

Malicious code in rollup-plugin-event-reveal-md-cors npm...

Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123150

Malicious code in publish-achernar-rollup-plugin-miranda npm...

Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123032

Malicious code in pyxis-terser-dactyl-rollup-plugin npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

MAL-2025-141296 Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-111183

Malicious code in meteor-rollup-plugin-io-carina npm...

Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...