EUVD-2025-113040

Malicious code in grunt-public-yonder-ultra npm...

EUVD-2025-113182

Malicious code in global-dione-eleventy-grunt npm...

Malicious code in janus-grunt-gatsby-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a924f0426ddf06b8ef2466546109dd481e0454ec09d04bba7947208e692a7a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-promise-vuetify-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124378

Malicious code in node-sass-grunt-pegasus-convict npm...

EUVD-2025-113049

Malicious code in grunt-fornax-scripts-vulcan npm...

Malicious code in grunt-xml-mira-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-gulp-quito-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113055

Malicious code in grunt-cosmiconfig-inquirer-cosmos npm...

EUVD-2025-124188

Malicious code in oauth-grunt-ignite-framework npm...

EUVD-2025-123576

Malicious code in polaris-grunt-nightwatch-apex npm...

EUVD-2025-113036

Malicious code in grunt-sails-astro-rigel npm...

EUVD-2025-121416

Malicious code in terser-chakra-ui-grunt-janus npm...

EUVD-2025-116501

Malicious code in ariel-zenobia-hugo-grunt npm...

MAL-2025-143052 Malicious code in grunt-ariel-chakra-ui-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786310c8f3d739caa279ff4fb12717743d967f20d05ac5839a8759980394f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143076 Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-astro-geckodriver-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1be0f2bf539ff1222567468e6365afcb79ff15bd5b2b4407cf0121b5d75024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-halley-phoebe-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143070 Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...