412 matches found
Malicious code in grunt-electron-pulsar-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ea919b133b26f2572c20b1296fdaadc09d377c1358da6d4e628faa198f5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121727
Malicious code in spinner-grunt-umbra-virgo npm...
Malicious code in grunt-leda-fomalhaut-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6439d544e62b4e9dda7e0c94d5d788ce0dd93b887af48316cc8e73c4f3c50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113043
Malicious code in grunt-prettier-chromedriver-husky npm...
EUVD-2025-122194
Malicious code in scripts-concurrently-grunt-yildun npm...
EUVD-2025-113047
Malicious code in grunt-helmet-jasmine-loop npm...
EUVD-2025-120772
Malicious code in virgo-grunt-prettier-quito npm...
EUVD-2025-112118
Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt npm...
EUVD-2025-113304
Malicious code in ganymede-luna-solis-grunt npm...
MAL-2025-141470 Malicious code in dagda-gulp-quito-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143075 Malicious code in grunt-rimraf-altair-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af5f7f2e436b1bf77f1f33fdd45e82656ce5d5f0bc51c4f7e5e94ac407ee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113038
Malicious code in grunt-restart-triton-chalk npm...
Malicious code in polaris-grunt-nightwatch-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-restart-triton-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115618
Malicious code in castor-nashira-grunt-foundation npm...
MAL-2025-149645 Malicious code in xenon-grunt-elektra-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605c1515f7a09e51dec27180935b274edf6061e32b33b0ad83fe5b42f9ce9e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112037
Malicious code in jwt-grunt-got-module npm...
MAL-2025-143071 Malicious code in grunt-promise-vuetify-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146365 Malicious code in polaris-scripts-local-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8f405e714983a1ab5e7fa91c29eb83b22cbc250c4091cbe49eaa1c588d73fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...