PkgRadar

npm · registry.npmjs.org

rollup-plugin-polyfill-handler

no static findings

Early detection

PkgRadar flagged this 10.1 days before public disclosure

Detected 2026-06-26 · disclosed as MAL-2026-6826 on 2026-07-06

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.1High risk02026-07-10
1.0.0Review102026-06-26

Block this in CI

PkgRadar gates rollup-plugin-polyfill-handler (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence
rollup-plugin-polyfill-handler — npm malware advisory | PkgRadar