Malicious code in commitlint-hyperion-morgan-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b017e87cab1331f2b8c026fb02605c014ba3e727b00836a191223d6e44a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113074

Malicious code in gridsome-docusaurus-module-ursa npm...

EUVD-2025-113815

Malicious code in europa-sync-server-gridsome npm...

EUVD-2025-115084

Malicious code in config-gridsome-rehype-io npm...

EUVD-2025-112004

Malicious code in karma-gridsome-backend-hydra npm...

EUVD-2025-113785

Malicious code in event-spica-gridsome-semantic-release npm...

EUVD-2025-120252

Malicious code in xenos-gridsome-start-titan npm...

EUVD-2025-113086

Malicious code in gravity-gridsome-equinox-playwright npm...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113067

Malicious code in gridsome-hermes-nightwatch-aldebaran npm...

EUVD-2025-123743

Malicious code in phoebe-sagitta-gridsome-child-process npm...

EUVD-2025-124535

Malicious code in neptune-uninstall-gridsome-levels npm...

Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-barnard-express-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cd748aa1b25e39fe6b6bc97cc6b2c88f522072dd2fe72c0de2ed22d74d7acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114805

Malicious code in css-loader-gridsome-postcss-loader-yaml npm...

EUVD-2025-120474

Malicious code in wezen-gridsome-odin-husky npm...

EUVD-2025-120224

Malicious code in xerxes-gridsome-postcss-loader-google npm...

EUVD-2025-120613

Malicious code in webdriver-manager-dynamo-gridsome-ariel npm...

MAL-2025-142861 Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...