EUVD-2025-114731

Malicious code in cygnus-rollup-package-native npm...

EUVD-2025-122130

Malicious code in sedna-sequelize-less-loader-rollup-plugin npm...

EUVD-2025-122399

Malicious code in rollup-plugin-ultra-ganymede-vega npm...

EUVD-2025-121949

Malicious code in sirius-rollup-despina-meissa npm...

EUVD-2025-122430

Malicious code in rollup-bellatrix-telesto-jasmine npm...

EUVD-2025-122424

Malicious code in rollup-global-indus-testcafe npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

EUVD-2025-116635

Malicious code in antd-sagitta-meissa-rollup npm...

EUVD-2025-122401

Malicious code in rollup-plugin-style-loader-fornax-mdx npm...

EUVD-2025-113860

Malicious code in eslint-supervisor-rollup-plugin-hapi npm...

Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115734

Malicious code in canopus-rollup-semantic-ui-heka npm...

EUVD-2025-122391

Malicious code in rollup-proxima-norma-less-loader npm...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-115555

Malicious code in centaurus-rimraf-install-rollup-plugin npm...

Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-equinox-convict-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830bba97b38273c827dfbc347dbec50ed18767cbe6e901b55fd0fa9562f540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122420

Malicious code in rollup-magellan-hapi-puppeteer npm...

EUVD-2025-121282

Malicious code in thuban-delphinus-rollup-plugin-graphql npm...

EUVD-2025-121710

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation npm...