EUVD-2025-178105

Malicious code in library-dotenv-safe-gridsome-singularity npm...

EUVD-2025-177774

Malicious code in mongodb-kastra-gridsome-fusion npm...

EUVD-2025-178701

Malicious code in global-gridsome-oauth-supervisor npm...

EUVD-2025-180223

Malicious code in auth0-iota-gridsome-meteor npm...

Malicious code in mongodb-kastra-gridsome-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e827819cb34d09b58770afb4d907c8cfe540dad27e0303f9827fff00ee4bdb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-interstellarmedium-private-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc35853619fa48c454f34cb715f9e8d0ccd26fc433fd0366423d526d7580bd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186110 Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133334c5bcc682926745fc752255a3c1e4da48e8c1e07925a14d0f505ea7526d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185411 Malicious code in airbnb-test-betelgeuse-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8c54d1cf82e48e21e0919c55c28945ae75a22c803ff46452fbae803bdfe1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187237 Malicious code in gridsome-procyon-karma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1936be28cc33fc6163682c5679971d9806a52fb6c824370102a60c6401e583d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189959 Malicious code in tool-wavefunction-ultra-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6440db217bbb9f167b1f6b7b229fe260c8138b56561aaeb8a50a4cfe2d6b38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178646

Malicious code in gridsome-planckscale-primatology-speleology npm...

EUVD-2025-177117

Malicious code in pm2-gridsome-playwright-init npm...

Malicious code in gravity-gridsome-equinox-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4084b8a79dc6e11f6c86a344031dbaf4ba059ec5ef8d2e89110dcae2b9a3ff5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114530

Malicious code in dependencies-request-private-gridsome npm...

EUVD-2025-113815

Malicious code in europa-sync-server-gridsome npm...

EUVD-2025-113072

Malicious code in gridsome-eslint-plugin-neptune-quito npm...

EUVD-2025-113065

Malicious code in gridsome-oauth-bulma-html-webpack-plugin npm...

EUVD-2025-113086

Malicious code in gravity-gridsome-equinox-playwright npm...

EUVD-2025-124535

Malicious code in neptune-uninstall-gridsome-levels npm...

EUVD-2025-123796

Malicious code in perseus-yakutsk-frontend-gridsome npm...