MAL-2025-186399 Malicious code in cryovolcano-grus-ini-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a229347ff016f9d70393ed03e8a4a921a6e4c86a3a5603209a0d4bd75855e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178970

Malicious code in exoplanetology-grus-mdx-comet npm...

EUVD-2025-180433

Malicious code in andromeda-grus-leda-leda npm...

EUVD-2025-178922

Malicious code in fetch-ursa-vega-grus npm...

EUVD-2025-177861

Malicious code in meteor-dysonswarm-geckodriver-grus npm...

EUVD-2025-178633

Malicious code in grus-superposition-pegasus-antd npm...

EUVD-2025-178462

Malicious code in ichnology-eventhoriz-grus-non-blocking npm...

EUVD-2025-175696

Malicious code in void-grus-superagent-planckscale npm...

EUVD-2025-178128

Malicious code in less-loader-grus-void-biosignature npm...

EUVD-2025-178641

Malicious code in grus-crust-greatfilter-holography npm...

EUVD-2025-178638

Malicious code in grus-nodemon-rehype-hermes npm...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178639

Malicious code in grus-neutrino-html-webpack-plugin-cluster npm...

EUVD-2025-179483

Malicious code in cryovolcano-grus-ini-proxima npm...

EUVD-2025-175425

Malicious code in zenobia-grus-readable-semantic-ui npm...

EUVD-2025-177541

Malicious code in norma-public-grus-supercluster npm...

Malicious code in grus-superposition-pegasus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad58e646a9599b1bc74e3e52f19631059b4d22a2879e23b3516e4ff029e303d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175457

Malicious code in yakutsk-saturnology-grus-prosthetics npm...

EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

EUVD-2025-177245

Malicious code in perseus-xenon-grus-polaris npm...