EUVD-2025-122431

Malicious code in rollup-barnard-cz-conventional-changelog-regulus npm...

EUVD-2025-114686

Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch npm...

EUVD-2025-115019

Malicious code in convict-rollup-plugin-buffer-sagitta npm...

Malicious code in neptune-eris-rollup-plugin-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9c685aef5b5b9c0f020ad1b241c7b6dc706cb726fd15aaf95398f50602866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

EUVD-2025-113486

Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin npm...

EUVD-2025-111598

Malicious code in loglevel-postcss-pm2-rollup npm...

EUVD-2025-124883

Malicious code in miranda-ganymede-rollup-plugin-grus npm...

EUVD-2025-122414

Malicious code in rollup-plugin-antares-pulsar-dynamo npm...

EUVD-2025-116738

Malicious code in altair-rollup-plugin-jasmine-chai npm...

EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

EUVD-2025-116635

Malicious code in antd-sagitta-meissa-rollup npm...

EUVD-2025-113860

Malicious code in eslint-supervisor-rollup-plugin-hapi npm...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

MAL-2025-140372 Malicious code in canopus-rollup-semantic-ui-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103f0a8650f4e9f282e4b3f6b488dc1bca436344cd8eaa9a147741e10b363f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

MAL-2025-140151 Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142543 Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74d06ffce784053f018ae7e3a21129547d5cdfba1edf9f5677c976fc3e6855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141378 Malicious code in cygnus-rollup-package-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...