412 matches found
CLSA-2026-1774398085 TuxCare security update for grunt-karma (8 CVEs)
TuxCare rebuilt grunt-karma to address 8 CVEs. Fixed in 4.0.1-tuxcare.1...
RCE (Remote Code Execution) grunt Dependency in Bitbucket Data Center
This High severity RCE Remote Code Execution vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This Remote Code Execution vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H allows an unauthenticated attacker to expose...
Astra Linux – Vulnerability in Grunt
Path traversal in the GitHub repository gruntjs/grunt before version 1.5.2...
Astra Linux – Vulnerability in Grunt
The file.copy operations in GruntJS are vulnerable to a TOCTOU race condition, which can lead to arbitrary file writes in the GitHub repository gruntjs/grunt before version 1.5.3. This vulnerability allows for arbitrary file writes that can lead to local privilege escalation to the GruntJS user...
Malicious Package
Overview ig-grunt-file-list is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ig-grunt-release is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-178637
Malicious code in grus-pipe-websockets-grunt npm...
EUVD-2025-177050
Malicious code in private-dorado-grunt-jupiter npm...
Malicious code in grus-pipe-websockets-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178437
Malicious code in impulse-holography-grunt-sequelize npm...
Malicious code in sagitta-shelljs-halley-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178573
Malicious code in heka-relay-grunt-gammarayburst npm...
EUVD-2025-178642
Malicious code in grunt-ursa-cosmochemistry-xenobiology npm...
EUVD-2025-179639
Malicious code in commitizen-radioastronomy-steganography-grunt npm...
EUVD-2025-179517
Malicious code in cosmos-yonder-grunt-nashira npm...
EUVD-2025-176553
Malicious code in sagitta-shelljs-halley-grunt npm...
EUVD-2025-179340
Malicious code in dendrochronology-test-markdownlint-grunt npm...
EUVD-2025-176267
Malicious code in spectron-grunt-auth-europa npm...