EUVD-2025-113010

Malicious code in grus-remark-transport-framework npm...

EUVD-2025-114672

Malicious code in cz-conventional-changelog-zenobia-javascript-grus npm...

EUVD-2025-113082

Malicious code in gravity-release-it-grus-hermes npm...

EUVD-2025-116407

Malicious code in aurora-aquarius-process-grus npm...

Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116547

Malicious code in aquarius-ultra-grus-yildun npm...

EUVD-2025-122099

Malicious code in semantic-release-eslint-config-grus-capella npm...

EUVD-2025-122471

Malicious code in rimraf-kaus-despina-grus npm...

EUVD-2025-113019

Malicious code in grus-jwt-transform-ceres npm...

Malicious code in grus-jwt-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113365

Malicious code in fusion-rollup-plugin-hexo-grus npm...

EUVD-2025-116111

Malicious code in betelgeuse-mongodb-command-grus npm...

EUVD-2025-113006

Malicious code in grus-ursa-ganymede-semantic-ui npm...

EUVD-2025-111388

Malicious code in markdownlint-sedna-flare-grus npm...

EUVD-2025-116316

Malicious code in avior-solis-grus-run-script npm...

EUVD-2025-113029

Malicious code in grus-backend-webdriver-mocha-transform npm...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

EUVD-2025-122511

Malicious code in reveal-md-grus-middleware-polaris npm...

EUVD-2025-123193

Malicious code in proxima-process-grus-fomalhaut npm...

Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...