223 matches found
EUVD-2025-176484
Malicious code in scripts-shelljs-quark-gridsome npm...
EUVD-2025-178105
Malicious code in library-dotenv-safe-gridsome-singularity npm...
EUVD-2025-178648
Malicious code in gridsome-enceladus-aldebaran-auth0 npm...
Malicious code in mongodb-kastra-gridsome-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e827819cb34d09b58770afb4d907c8cfe540dad27e0303f9827fff00ee4bdb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gridsome-interstellarmedium-private-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc35853619fa48c454f34cb715f9e8d0ccd26fc433fd0366423d526d7580bd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178649
Malicious code in gridsome-andromeda-algol-exoplanetology npm...
MAL-2025-188850 Malicious code in procyon-spectron-webdriver-nestjs-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bbd9161c64afc49fa855f2f702c58f7550b71f364944f0224c1323aa0cd7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189959 Malicious code in tool-wavefunction-ultra-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6440db217bbb9f167b1f6b7b229fe260c8138b56561aaeb8a50a4cfe2d6b38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185411 Malicious code in airbnb-test-betelgeuse-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8c54d1cf82e48e21e0919c55c28945ae75a22c803ff46452fbae803bdfe1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186110 Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133334c5bcc682926745fc752255a3c1e4da48e8c1e07925a14d0f505ea7526d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187237 Malicious code in gridsome-procyon-karma-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1936be28cc33fc6163682c5679971d9806a52fb6c824370102a60c6401e583d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187238 Malicious code in gridsome-slides-pipe-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3041ecadbfa1b9ee20c448a9f21b65c9463e9e394b9f82d5a14402dab7ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121031
Malicious code in ultra-gridsome-aldebaran-nebula npm...
EUVD-2025-113062
Malicious code in gridsome-release-it-cluster-antares npm...
EUVD-2025-112860
Malicious code in helmet-enif-gridsome-hercules npm...
EUVD-2025-120697
Malicious code in vulcan-exec-foundation-gridsome npm...
EUVD-2025-123796
Malicious code in perseus-yakutsk-frontend-gridsome npm...
Malicious code in gridsome-release-it-cluster-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-gridsome-callback-aldebaran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649fb3727c16290ecd60b5cbbaca8040d62a9ceac4ce113ad39d98f13ab77b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...