MAL-2025-45905 Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...

MAL-2025-45902 Malicious code in rollup-mesosphere-fermion-quantum (npm)

The package rollup-mesosphere-fermion-quantum was found to contain malicious code...

Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)

The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code...

MAL-2025-44381 Malicious code in geckodriver-rollup-ganymede-cressida (npm)

The package geckodriver-rollup-ganymede-cressida was found to contain malicious code...

MAL-2025-43960 Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)

The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...

Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...

Malicious code in sedna-regulus-rollup-plugin-phoebe (npm)

The package sedna-regulus-rollup-plugin-phoebe was found to contain malicious code...

Malicious code in blitz-rollup-scripts-cli (npm)

The package blitz-rollup-scripts-cli was found to contain malicious code...

MAL-2025-44584 Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)

The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code...

MAL-2025-43632 Malicious code in blitz-rollup-scripts-cli (npm)

The package blitz-rollup-scripts-cli was found to contain malicious code...

MAL-2025-45903 Malicious code in rollup-plugin-despina-borealis-subduction (npm)

The package rollup-plugin-despina-borealis-subduction was found to contain malicious code...

Security Bulletin: Carbon design system packages

Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....

Malicious code in rollup-indus-terser-outercore (npm)

The package rollup-indus-terser-outercore was found to contain malicious code...

Malicious code in via-date-picker-rollup (npm)

The package via-date-picker-rollup was found to contain malicious code...

Malicious code in rollup-development-vega-prettier-plugin-markdown (npm)

The package rollup-development-vega-prettier-plugin-markdown was found to contain malicious code...

Malicious code in hydra-rollup-kuiperbelt-node-sass (npm)

The package hydra-rollup-kuiperbelt-node-sass was found to contain malicious code...

Malicious code in build-dendrochronology-meteor-rollup (npm)

The package build-dendrochronology-meteor-rollup was found to contain malicious code...

Malicious code in paleoanthropology-astrobiology-rollup-karma (npm)

The package paleoanthropology-astrobiology-rollup-karma was found to contain malicious code...

Malicious code in paleontology-process-rollup-speleology (npm)

The package paleontology-process-rollup-speleology was found to contain malicious code...

Malicious code in loom-plugin-rollup (npm)

The package loom-plugin-rollup was found to contain malicious code...