EUVD-2025-111398

Malicious code in markdown-warp-gridsome-jovian npm...

EUVD-2025-115137

Malicious code in commitlint-config-angular-tethys-gridsome-terser npm...

Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122627

Malicious code in request-hyperion-gridsome-unuk npm...

EUVD-2025-121840

Malicious code in solis-sedna-loopback-gridsome npm...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-113078

Malicious code in gridsome-barnard-express-vuetify npm...

EUVD-2025-113063

Malicious code in gridsome-orbit-sqlite-redis npm...

EUVD-2025-113064

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora npm...

EUVD-2025-113079

Malicious code in gridsome-auriga-hugo-query npm...

EUVD-2025-120252

Malicious code in xenos-gridsome-start-titan npm...

EUVD-2025-116343

Malicious code in auth0-style-loader-polaris-gridsome npm...

EUVD-2025-114207

Malicious code in electron-builder-gridsome-callback-aldebaran npm...

EUVD-2025-111895

Malicious code in kronos-gridsome-eslint-plugin-forever npm...

EUVD-2025-113251

Malicious code in geckodriver-chromedriver-gridsome-callisto npm...

EUVD-2025-124346

Malicious code in nodejs-quasar-gridsome-npm npm...

EUVD-2025-113070

Malicious code in gridsome-gridsome-centaurus-helios npm...

EUVD-2025-124217

Malicious code in nuxtjs-gridsome-uglify-js-terser npm...

EUVD-2025-111656

Malicious code in lint-staged-gridsome-less-loader-standard npm...

Malicious code in rest-hyperion-json-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808f6a254b6e4a43f70509201c590015d6715ac53b65322f9fb07b352c7f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...