Malicious code in cygnus-rollup-package-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122409

Malicious code in rollup-plugin-eridanus-blitz-jsonp npm...

EUVD-2025-112615

Malicious code in hyperion-rollup-plugin-loop-testcafe npm...

EUVD-2025-114753

Malicious code in csv-rollup-dotenv-yonder npm...

EUVD-2025-121801

Malicious code in spectron-regulus-superagent-rollup-plugin npm...

EUVD-2025-121585

Malicious code in style-loader-rollup-plugin-izar-phoebe npm...

EUVD-2025-122111

Malicious code in selenium-request-rollup-plugin-dagda npm...

EUVD-2025-122434

Malicious code in rollup-atlas-electron-pino npm...

EUVD-2025-122794

Malicious code in registry-fork-terser-webpack-plugin-rollup npm...

EUVD-2025-123952

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse npm...

EUVD-2025-122962

Malicious code in quasar-rollup-adonis-equinox npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112903

Malicious code in heka-nebula-rollup-plugin-inquirer npm...

Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123550

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin npm...

EUVD-2025-124643

Malicious code in nashira-flare-rollup-plugin-despina npm...

EUVD-2025-122407

Malicious code in rollup-plugin-event-reveal-md-cors npm...

EUVD-2025-122421

Malicious code in rollup-lynx-halley-local npm...

Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...