rollup-packages-polyfill-core
This report shows the evidence for rollup-packages-polyfill-core@0.14.1. 14 of 15 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
OpenSSF/OSV Malicious Advisory
imported 3mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-10160 confirms this npm version as malicious.
Advisory
MAL-2026-10160
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rollup-packages-polyfill-core (npm)
Details
Package name typosquats the popular rollup-plugin-polyfill-node and copies its README verbatim to bait installs. On require() of the main entry (dist/index.js), the module decodes base64 blobs to reconstruct the strings 'npm install svgson-lite --no-save --silent --no-audit --no-fund' and the module name 'svgson-lite', spawns the install via child_process.spawn (stdio ignored, windowsHide true), and on process close require()s the freshly-installed svgson-lite package and invokes svgo.getPlugin()(). This fetches and executes attacker-controlled code from a second npm package inside the consumer's process every time the library is imported. The install command and target module name are stored as base64 to hide them from static scanners; a legitimate rollup polyfill plugin has no need to conceal npm install calls.
Independent scan evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Source & flagged code
7 flagged · loading sourcedist/index.jsView file
2L3: const inject = require('@rollup/plugin-inject');
L4: const modules = require('./modules.js');
Critical
Encoded Package Runner Execution
Source decodes numeric character arrays into a child-process package-runner command and executes it.
dist/index.jsView on unpkg · L2•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg83L84: const { spawn } = require('child_process');
L85:
High
2L3: const inject = require('@rollup/plugin-inject');
L4: const modules = require('./modules.js');
Findings
2 Critical3 High5 Medium5 Low
CriticalEncoded Package Runner Executiondist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/polyfills.js
HighKnown Malware Source Fingerprint Signaturedist/modules.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/polyfills.js
LowObfuscated
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to rollup-packages-polyfill-core@0.14.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing rollup-packages-polyfill-core@0.14.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.