0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
rollup-plugin-polyfill-handler
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting rollup-plugin-polyfill-handler, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6826 | Unknown | Malicious code in rollup-plugin-polyfill-handler (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8fcd05581537eece4993579cb664215a82b87dad2bdb03cae7ba998ba092a79d) Package name mimics the rollup-plugin-* ecosystem but exposes no Rollup plugin API. Its exported functions getPlugin, setPlugin, and getPluginExten each issue an HTTP GET to https://rest-icon-handler.store/icons/<token> and pass the response body through JSON.parse followed by eval, executing whatever the remote server returns inside the caller's Node.js process. The destination URL is assembled from split string fragments (protocol/separat |
| OSV (opens in a new tab) |
- MAL-2026-6826UnknownMalicious code in rollup-plugin-polyfill-handler (npm)
all
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8fcd05581537eece4993579cb664215a82b87dad2bdb03cae7ba998ba092a79d) Package name mimics the rollup-plugin-* ecosystem but exposes no Rollup plugin API. Its exported functions getPlugin, setPlugin, and getPluginExten each issue an HTTP GET to https://rest-icon-handler.store/icons/<token> and pass the response body through JSON.parse followed by eval, executing whatever the remote server returns inside the caller's Node.js process. The destination URL is assembled from split string fragments (protocol/separat