3002 matches found
MAL-2025-185790 Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b276a38e6d1442516815c0d50b8061aa3cdad9c4604a462f8abae9d6ac73d619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189267 Malicious code in rollup-nova-wavefunction-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a71178046d6bba4cd289f92d4a80c4b5b2938521d5c4be7a784b9de70d0b722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177784
Malicious code in module-biomimicry-rollup-comet npm...
MAL-2025-189271 Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175572
Malicious code in weywot-resolvers-vuepress-rollup npm...
Malicious code in biotechnology-apollo-rollup-plugin-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0830b98c58ab354f9147b7c6003d2a35dd551ebee55353545da36da720098ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in markdownlint-rollup-loglevel-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9bcd9f7f8ab3bac1cfef2c4e32342014982407e7e69dedb4ebd4e42256d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178577
Malicious code in heka-markdownlint-rollup-node-config npm...
EUVD-2025-178668
Malicious code in graviton-sociobiology-tailwindcss-rollup npm...
EUVD-2025-177294
Malicious code in pavo-hapi-hyperion-rollup-plugin npm...
EUVD-2025-176604
Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup npm...
Malicious code in graviton-sociobiology-tailwindcss-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7952f07b66118ba76773e8f7827c06eb1e958d529bd65938ff48c0bfd80c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179510
Malicious code in cressida-yakutsk-zephyr-rollup npm...
EUVD-2025-179301
Malicious code in development-rollup-pipe-koa npm...
EUVD-2025-180473
Malicious code in aldebaran-halley-eris-rollup-plugin npm...
EUVD-2025-176195
Malicious code in stratosphere-speleology-rollup-plugin-hapi npm...
Malicious code in algol-elektra-rollup-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...