254 matches found
EUVD-2025-113022
Malicious code in grus-concurrently-markdownlint-ceres npm...
EUVD-2025-124056
Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...
MAL-2025-143947 Malicious code in jovian-grus-webdriver-manager-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9fee113459572e0c4edfa54be3fd7616a17111bf73aaefcab86c4eaaea0ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-json-buffer-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grus-concurrently-markdownlint-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967406994297f477ec4001272a2beec41ae29e16ba0f0c229bb246f1ce5bbd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113007
Malicious code in grus-typeorm-koa-unuk npm...
EUVD-2025-113023
Malicious code in grus-child-process-server-inquirer npm...
Malicious code in grus-chai-library-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143107 Malicious code in grus-vortex-astro-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61e3280e1988ae1427e0687e09494aef1d2eb0292075f75ddbd7458039d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grus-celeste-rigel-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6cbe3104473c89681dcb17aab589481bd73d3e1aba87657a38f2fcf233299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124789
Malicious code in mongodb-grus-despina-apollo npm...
MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113030
Malicious code in grus-avior-sirius-postcss npm...
EUVD-2025-123158
Malicious code in public-oberon-tailwindcss-grus npm...
Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124418
Malicious code in node-config-ariel-cosmiconfig-grus npm...
MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...