EUVD-2025-113056

Malicious code in grunt-chai-impulse-centauri npm...

EUVD-2025-113470

Malicious code in fornax-octans-grunt-metalsmith npm...

EUVD-2025-116494

Malicious code in astro-izar-enceladus-grunt npm...

EUVD-2025-113034

Malicious code in grunt-vega-deneb-uglify-js npm...

EUVD-2025-113050

Malicious code in grunt-envconfig-bootes-eslint-plugin npm...

EUVD-2025-113585

Malicious code in flare-grunt-sass-loader-callback npm...

EUVD-2025-122598

Malicious code in resolvers-forever-grunt-koa npm...

EUVD-2025-111894

Malicious code in kronos-grunt-sadr-event npm...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115618

Malicious code in castor-nashira-grunt-foundation npm...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-electron-pulsar-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ea919b133b26f2572c20b1296fdaadc09d377c1358da6d4e628faa198f5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124813

Malicious code in module-grunt-async-ophiuchus npm...

EUVD-2025-111389

Malicious code in markdownlint-procyon-magellan-grunt npm...

Malicious code in grunt-prettier-chromedriver-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c23644cb4dbe3d6725f5ea83a20e4ec4b24fc724d6f4b8fa491da874661a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143071 Malicious code in grunt-promise-vuetify-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141197 Malicious code in cosmiconfig-tethys-jwt-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235d0c5899049d55e6f77b9f13f4d8ed47d5c14d47cdde986b99661b00ba342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143075 Malicious code in grunt-rimraf-altair-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af5f7f2e436b1bf77f1f33fdd45e82656ce5d5f0bc51c4f7e5e94ac407ee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...