MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-tethys-dagda-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d94ef97414b28d8ff67854bcb4704ad14176df963449e87564a01e19d714d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115697

Malicious code in carina-grus-farout-antd npm...

EUVD-2025-113022

Malicious code in grus-concurrently-markdownlint-ceres npm...

EUVD-2025-124883

Malicious code in miranda-ganymede-rollup-plugin-grus npm...

EUVD-2025-122195

Malicious code in scripts-ceres-command-grus npm...

EUVD-2025-112166

Malicious code in jovian-grus-webdriver-manager-library npm...

EUVD-2025-113009

Malicious code in grus-taurus-xml-kinetic npm...

Malicious code in grus-taurus-xml-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142822 Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147451 Malicious code in rimraf-kaus-despina-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143091 Malicious code in grus-css-loader-ophiuchus-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e043e95921a55127e5b044bc5645fc12d9eb1beb32ebd5b8c02459a6243966a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116211

Malicious code in backend-mongodb-pino-pretty-grus npm...

MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139280 Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143117 Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143475 Malicious code in hyperion-grus-aether-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fecdd0737209befcdd40ff14ff189edd26dc44c878a59f4d80c79df2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...