468 matches found
MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cosmiconfig-tethys-jwt-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235d0c5899049d55e6f77b9f13f4d8ed47d5c14d47cdde986b99661b00ba342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-electron-pulsar-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ea919b133b26f2572c20b1296fdaadc09d377c1358da6d4e628faa198f5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121347
Malicious code in test-schema-blaze-grunt npm...
EUVD-2025-122194
Malicious code in scripts-concurrently-grunt-yildun npm...
Malicious code in grunt-sails-astro-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111389
Malicious code in markdownlint-procyon-magellan-grunt npm...
Malicious code in framework-halley-phoebe-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-bunyan-convict-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0be9f17a0f8f2b3a4f62c63c7461b5adced413836aa1b4f216201de7a4d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-xml-mira-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in halley-grunt-firebase-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subscription-delphinus-grunt-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7dd9799d731cbf6da4d1a81e6520f57583f73291843b357414d2a63c31c3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-grunt-prettier-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca017c4a5caa5e056c00e7d56901e72c07a0c8b5dcf92ad2effdaa6cd3b59db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113470
Malicious code in fornax-octans-grunt-metalsmith npm...
EUVD-2025-113182
Malicious code in global-dione-eleventy-grunt npm...
EUVD-2025-113057
Malicious code in grunt-bunyan-convict-forever npm...
EUVD-2025-113055
Malicious code in grunt-cosmiconfig-inquirer-cosmos npm...
EUVD-2025-113053
Malicious code in grunt-development-postcss-loader-hydra npm...