Malicious code in rest-hyperion-json-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808f6a254b6e4a43f70509201c590015d6715ac53b65322f9fb07b352c7f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122131

Malicious code in sedna-semantic-release-gridsome-janus npm...

EUVD-2025-111398

Malicious code in markdown-warp-gridsome-jovian npm...

EUVD-2025-113073

Malicious code in gridsome-eslint-config-native-sails npm...

EUVD-2025-116628

Malicious code in apex-castor-gridsome-avior npm...

Malicious code in lint-staged-gridsome-less-loader-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a7c959df4560a355bfcd68e15080007566b2e99e74162477598c165db3994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-sails-celeste-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef30a7ff486673f6489f409abca3e079dd979bc23c287b2d198e1b0ce77da7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124242

Malicious code in npm-helios-nuxtjs-gridsome npm...

Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd635838c8a3e29ed758fb816df1aae5113f58d4136c3bc38d13731170c1aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123702

Malicious code in pino-gridsome-lyra-browserify npm...

EUVD-2025-120962

Malicious code in uninstall-quasar-webdriverio-gridsome npm...

Malicious code in yaml-express-cors-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120143

Malicious code in yaml-express-cors-gridsome npm...

EUVD-2025-124217

Malicious code in nuxtjs-gridsome-uglify-js-terser npm...

Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976666400c8581d9105dfe0fb7da5ae6fb7131a6b527569a93b206d34a4c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120699

Malicious code in vulcan-eris-ophiuchus-gridsome npm...

EUVD-2025-111895

Malicious code in kronos-gridsome-eslint-plugin-forever npm...

EUVD-2025-113071

Malicious code in gridsome-geckodriver-envconfig-nebula npm...

Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...