412 matches found
Malicious code in halley-grunt-firebase-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122573
Malicious code in rest-grunt-gatsby-impulse npm...
EUVD-2025-113035
Malicious code in grunt-stream-rest-browserify npm...
Malicious code in grunt-stream-rest-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121572
Malicious code in subscription-delphinus-grunt-nightwatch npm...
Malicious code in grunt-bunyan-convict-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0be9f17a0f8f2b3a4f62c63c7461b5adced413836aa1b4f216201de7a4d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-grunt-prettier-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca017c4a5caa5e056c00e7d56901e72c07a0c8b5dcf92ad2effdaa6cd3b59db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polaris-scripts-local-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8f405e714983a1ab5e7fa91c29eb83b22cbc250c4091cbe49eaa1c588d73fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-helmet-jasmine-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f342771837b6a879ec6d49eb9f7db8a6667d95f33fe036e25e319b9828ccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122188
Malicious code in scripts-grunt-figures-sirius npm...
EUVD-2025-123556
Malicious code in polaris-scripts-local-grunt npm...
EUVD-2025-113048
Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin npm...
EUVD-2025-113046
Malicious code in grunt-leda-fomalhaut-publish npm...
EUVD-2025-113042
Malicious code in grunt-prettier-lacerta-miranda npm...
EUVD-2025-120702
Malicious code in vulcan-concurrently-webdriver-mocha-grunt npm...
MAL-2025-148512 Malicious code in terser-chakra-ui-grunt-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903a4d37382f2a09f61b6e8a5ac96de1298a22ff49679f7e040bcd366594f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...