EUVD-2025-113041

Malicious code in grunt-promise-vuetify-middleware npm...

EUVD-2025-112968

Malicious code in halley-grunt-firebase-nebula npm...

EUVD-2025-113054

Malicious code in grunt-cross-env-init-phenomic npm...

Malicious code in cosmiconfig-tethys-jwt-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235d0c5899049d55e6f77b9f13f4d8ed47d5c14d47cdde986b99661b00ba342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115367

Malicious code in charon-webdriver-mocha-grunt-kinetic npm...

EUVD-2025-113033

Malicious code in grunt-xml-mira-axios npm...

EUVD-2025-113052

Malicious code in grunt-electron-pulsar-kinetic npm...

EUVD-2025-116104

Malicious code in betelgeuse-ora-grunt-leda npm...

EUVD-2025-113059

Malicious code in grunt-astro-geckodriver-standard npm...

EUVD-2025-113032

Malicious code in grunt-yaml-testcafe-tailwindcss npm...

Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114081

Malicious code in enceladus-grunt-jabbah-elektra npm...

Malicious code in virgo-grunt-prettier-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca017c4a5caa5e056c00e7d56901e72c07a0c8b5dcf92ad2effdaa6cd3b59db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122573

Malicious code in rest-grunt-gatsby-impulse npm...

MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148512 Malicious code in terser-chakra-ui-grunt-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903a4d37382f2a09f61b6e8a5ac96de1298a22ff49679f7e040bcd366594f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...