Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

EUVD-2025-122435

Malicious code in rocket-yaml-vortex-rollup-plugin npm...

Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121344

Malicious code in test-taurus-triton-rollup npm...

EUVD-2025-112603

Malicious code in ignite-ceres-element-ui-rollup npm...

EUVD-2025-115262

Malicious code in colors-csrf-rollup-prettier-plugin-markdown npm...

Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121384

Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin npm...

EUVD-2025-113365

Malicious code in fusion-rollup-plugin-hexo-grus npm...

Malicious code in rollup-nova-inquirer-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f33f361a42c5d6ef8fae97296eb72132192a355ff8bbb783c6031b36c63d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122385

Malicious code in rollup-terser-local-neptune npm...

EUVD-2025-122397

Malicious code in rollup-plugin-virgo-uninstall-hercules npm...

EUVD-2025-123032

Malicious code in pyxis-terser-dactyl-rollup-plugin npm...

EUVD-2025-111971

Malicious code in kaus-eris-regulus-rollup npm...

EUVD-2025-112154

Malicious code in jovian-rollup-plugin-jest-polaris npm...

EUVD-2025-122417

Malicious code in rollup-nova-inquirer-magellan npm...

Malicious code in rollup-plugin-nashira-vuepress-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169062d32a8b5fef5a3694e9540f986363eb8c6c58856746ac4648e178fcda54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...