EUVD-2025-113290

Malicious code in ganymede-sirius-triton-grus npm...

Malicious code in grus-backend-webdriver-mocha-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee762578e81ff651deb97f909d6088e265292074eacd07e99df87a2e09c9bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114902

Malicious code in cosmos-helmet-grus-cross-env npm...

EUVD-2025-116087

Malicious code in betelgeuse-writable-grus-build npm...

Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111841

Malicious code in leda-grus-bellatrix-docusaurus npm...

Malicious code in miranda-ganymede-rollup-plugin-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d426fe4273e7ba4b8bb43d473c05095124efe85266ca7013af3abef0221260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113204

Malicious code in gemini-nova-postcss-loader-grus npm...

EUVD-2025-114465

Malicious code in dione-grus-phoenix-enif npm...

EUVD-2025-111893

Malicious code in kronos-grus-iota-eris npm...

Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122447

Malicious code in rocket-orbit-grus-sass-loader npm...

EUVD-2025-122684

Malicious code in release-it-transform-grus-apex npm...

EUVD-2025-116690

Malicious code in antares-grus-mui-polaris npm...

EUVD-2025-113431

Malicious code in framework-eris-nuxtjs-grus npm...

Malicious code in jovian-grus-webdriver-manager-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9fee113459572e0c4edfa54be3fd7616a17111bf73aaefcab86c4eaaea0ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-canopus-mutation-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5664bfa8cb0f8ea74e02667e677c54ce8adf8252363128555627600e9c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143947 Malicious code in jovian-grus-webdriver-manager-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9fee113459572e0c4edfa54be3fd7616a17111bf73aaefcab86c4eaaea0ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145893 Malicious code in ora-quito-grus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...