437 matches found
MAL-2025-188825 Malicious code in private-dorado-grunt-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f11eb7d0cf109b91dbe253864f2c5180d4dd0f625e3fc93c690844a23ac0b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113039
Malicious code in grunt-quito-postcss-loader-koa npm...
Malicious code in grunt-xml-mira-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120286
Malicious code in xenon-grunt-elektra-procyon npm...
EUVD-2025-116375
Malicious code in auth-nightwatch-grunt-forever npm...
EUVD-2025-113058
Malicious code in grunt-bootstrap-mongoose-elektra npm...
EUVD-2025-113490
Malicious code in fornax-grunt-zephyr-bunyan npm...
EUVD-2025-124092
Malicious code in ophiuchus-nashira-hexo-grunt npm...
EUVD-2025-116732
Malicious code in altair-ultra-grunt-gravity npm...
EUVD-2025-113044
Malicious code in grunt-pegasus-carpo-soap npm...
EUVD-2025-113174
Malicious code in global-hyperion-grunt-apex npm...
EUVD-2025-113037
Malicious code in grunt-rimraf-altair-enif npm...
EUVD-2025-121347
Malicious code in test-schema-blaze-grunt npm...
Malicious code in dagda-gulp-quito-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120557
Malicious code in webdriverio-indus-puppeteer-grunt npm...
EUVD-2025-113732
Malicious code in express-grunt-transport-solis npm...
Malicious code in oauth-grunt-ignite-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70b2cb2105c7e985d8b1a8300a90506bcf4491df82e912d93cf5cc72fcf3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113057
Malicious code in grunt-bunyan-convict-forever npm...