Malicious code in rollup-plugin-style-loader-fornax-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f50a3b799ed48afece1f3c0ca47c28c205b07ca81e8376485774124ef1ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122576

Malicious code in rest-eris-norma-rollup-plugin npm...

EUVD-2025-122419

Malicious code in rollup-mui-canopus-phoenix npm...

EUVD-2025-114003

Malicious code in epimetheus-rigel-rollup-schema npm...

EUVD-2025-111822

Malicious code in leda-rollup-mongodb-heka npm...

EUVD-2025-115983

Malicious code in bootstrap-rollup-figures-auriga npm...

Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122412

Malicious code in rollup-plugin-callisto-figures-cosmos npm...

EUVD-2025-122423

Malicious code in rollup-inquirer-draco-rigel npm...

EUVD-2025-124272

Malicious code in norma-rollup-websockets-draco npm...

EUVD-2025-120729

Malicious code in vuepress-rollup-plugin-bootes-polaris npm...

EUVD-2025-122396

Malicious code in rollup-plugin-wolf-markdownlint-pegasus npm...

EUVD-2025-113123

Malicious code in got-superagent-winston-rollup npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122426

Malicious code in rollup-ganymede-impulse-dagda npm...

EUVD-2025-115687

Malicious code in carina-phoebe-materialize-rollup npm...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-barnard-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d503b1e2061b46d61e17f201e8dbc899cb29441b3bdac807ce5d1e4707ef79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...