223 matches found
EUVD-2025-113062
Malicious code in gridsome-release-it-cluster-antares npm...
EUVD-2025-113078
Malicious code in gridsome-barnard-express-vuetify npm...
MAL-2025-143033 Malicious code in gridsome-auriga-hugo-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146178 Malicious code in phoebe-sagitta-gridsome-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ab02f0beafb5fa437dd180f105f309ce3d3df62066c7a2ab2a0177deaa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143026 Malicious code in gravity-gridsome-equinox-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4084b8a79dc6e11f6c86a344031dbaf4ba059ec5ef8d2e89110dcae2b9a3ff5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123934
Malicious code in passport-sedna-envconfig-gridsome npm...
EUVD-2025-112170
Malicious code in jovian-csrf-javascript-gridsome npm...
EUVD-2025-120143
Malicious code in yaml-express-cors-gridsome npm...
MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124217
Malicious code in nuxtjs-gridsome-uglify-js-terser npm...
MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143039 Malicious code in gridsome-eslint-config-native-sails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143036 Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-gridsome-init-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113193
Malicious code in gemini-websockets-pino-pretty-gridsome npm...