Malicious code in lint-staged-gridsome-less-loader-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a7c959df4560a355bfcd68e15080007566b2e99e74162477598c165db3994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123934

Malicious code in passport-sedna-envconfig-gridsome npm...

EUVD-2025-113586

Malicious code in flare-gridsome-sirius-ini npm...

EUVD-2025-113071

Malicious code in gridsome-geckodriver-envconfig-nebula npm...

EUVD-2025-114591

Malicious code in delphinus-gridsome-async-miranda npm...

Malicious code in flare-gridsome-sirius-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4b1fe500ee2effe967bf7ba30e6d290cc8f00e8f726d25fa86929dd3669d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114530

Malicious code in dependencies-request-private-gridsome npm...

Malicious code in gridsome-barnard-express-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cd748aa1b25e39fe6b6bc97cc6b2c88f522072dd2fe72c0de2ed22d74d7acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143036 Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143047 Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149232 Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143039 Malicious code in gridsome-eslint-config-native-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143048 Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976666400c8581d9105dfe0fb7da5ae6fb7131a6b527569a93b206d34a4c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146219 Malicious code in pino-gridsome-lyra-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33653a4a2d1906d23fa8402fda83edf48872dd0d7af938acf3dd109760577bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146178 Malicious code in phoebe-sagitta-gridsome-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ab02f0beafb5fa437dd180f105f309ce3d3df62066c7a2ab2a0177deaa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...