3018 matches found
Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124560
Malicious code in neptune-eris-rollup-plugin-nashira npm...
EUVD-2025-113821
Malicious code in europa-query-tailwindcss-rollup-plugin npm...
EUVD-2025-111183
Malicious code in meteor-rollup-plugin-io-carina npm...
EUVD-2025-122405
Malicious code in rollup-plugin-nashira-vuepress-rehype npm...
EUVD-2025-113569
Malicious code in fomalhaut-hugo-rollup-plugin-concurrently npm...
Malicious code in cygnus-umbriel-inquirer-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-async-shelljs-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123150
Malicious code in publish-achernar-rollup-plugin-miranda npm...
Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123676
Malicious code in pino-pretty-webdriverio-sails-rollup-plugin npm...
EUVD-2025-122415
Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse npm...
EUVD-2025-122429
Malicious code in rollup-buffer-superagent-start npm...
EUVD-2025-121699
Malicious code in sqlite-event-nodemon-rollup-plugin npm...
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miranda-ganymede-rollup-plugin-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d426fe4273e7ba4b8bb43d473c05095124efe85266ca7013af3abef0221260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-supervisor-fornax-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61010f916d4168f9195bd75c485c5d125f4cfa390ab502895dfa7938f1a20b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...