3020 matches found
MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146649 Malicious code in promise-rollup-miranda-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e81746e72d8a1587e17b3860845b2296f7c314699720c015d7dcf8b67504630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147536 Malicious code in rollup-taurus-antd-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147526 Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146859 Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147525 Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-yonder-draco-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115589
Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa npm...
EUVD-2025-122399
Malicious code in rollup-plugin-ultra-ganymede-vega npm...
EUVD-2025-122130
Malicious code in sedna-sequelize-less-loader-rollup-plugin npm...
EUVD-2025-122394
Malicious code in rollup-plugin-yonder-draco-fork npm...
EUVD-2025-111126
Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin npm...
EUVD-2025-116864
Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin npm...