EUVD-2025-121326

Malicious code in testcafe-rollup-plugin-corvus-europa npm...

EUVD-2025-122398

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got npm...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

EUVD-2025-122433

Malicious code in rollup-babel-jabbah-wolf npm...

EUVD-2025-122271

Malicious code in sails-lint-staged-dotenv-rollup-plugin npm...

EUVD-2025-123863

Malicious code in pegasus-taurus-elektra-rollup-plugin npm...

MAL-2025-147503 Malicious code in rollup-mui-canopus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da036f3d7323a4315db349f89af20737016fc10490dfc341a138c1357c5b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122397

Malicious code in rollup-plugin-virgo-uninstall-hercules npm...

EUVD-2025-122387

Malicious code in rollup-supervisor-fornax-vortex npm...

EUVD-2025-123765

Malicious code in phoebe-link-changelog-rollup-plugin npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

Malicious code in rollup-inquirer-draco-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06568ff8c9b5b8129a7f413673f0334f93785d140530e9711b957f467e793fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112480

Malicious code in init-titan-rollup-sagitta npm...

Malicious code in rollup-plugin-antares-pulsar-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c4d1d2c214784a5c4123907c0bba2d9e707026bd109c67d7150e0873e08efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111971

Malicious code in kaus-eris-regulus-rollup npm...

EUVD-2025-122794

Malicious code in registry-fork-terser-webpack-plugin-rollup npm...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...