EUVD-2025-123623

Malicious code in pm2-grus-castor-hermes npm...

EUVD-2025-113014

Malicious code in grus-polaris-cressida-europa npm...

EUVD-2025-113008

Malicious code in grus-tethys-dagda-pino-pretty npm...

EUVD-2025-113365

Malicious code in fusion-rollup-plugin-hexo-grus npm...

MAL-2025-143093 Malicious code in grus-jwt-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142681 Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145893 Malicious code in ora-quito-grus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143082 Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124789

Malicious code in mongodb-grus-despina-apollo npm...

MAL-2025-143108 Malicious code in grus-vulcan-postcss-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36086da343f1f0070583626b0a77247b177ec3186f1550f7756ef30c223b78a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112099

Malicious code in jsonp-writable-grus-cli npm...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113015

Malicious code in grus-ora-cosmiconfig-cluster npm...

MAL-2025-143947 Malicious code in jovian-grus-webdriver-manager-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9fee113459572e0c4edfa54be3fd7616a17111bf73aaefcab86c4eaaea0ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-nodejs-framework-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a0aea906337d6f6bc7a6439a9566fe6ceaa9a13b30010fcf3e994d9d76844e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...