EUVD-2025-115386

Malicious code in charon-gridsome-element-ui-meteor npm...

MAL-2025-143033 Malicious code in gridsome-auriga-hugo-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146178 Malicious code in phoebe-sagitta-gridsome-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ab02f0beafb5fa437dd180f105f309ce3d3df62066c7a2ab2a0177deaa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123934

Malicious code in passport-sedna-envconfig-gridsome npm...

EUVD-2025-121537

Malicious code in supervisor-callback-xo-gridsome npm...

EUVD-2025-115485

Malicious code in chakra-ui-nodemon-gridsome-quito npm...

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-express-cors-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123236

Malicious code in protractor-gridsome-levels-aquarius npm...

EUVD-2025-113586

Malicious code in flare-gridsome-sirius-ini npm...

EUVD-2025-115084

Malicious code in config-gridsome-rehype-io npm...

EUVD-2025-112860

Malicious code in helmet-enif-gridsome-hercules npm...

EUVD-2025-121082

Malicious code in typeorm-gridsome-vega-writable npm...

Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113062

Malicious code in gridsome-release-it-cluster-antares npm...

Malicious code in gridsome-eslint-config-native-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...