EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

MAL-2025-186399 Malicious code in cryovolcano-grus-ini-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a229347ff016f9d70393ed03e8a4a921a6e4c86a3a5603209a0d4bd75855e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187754 Malicious code in less-loader-grus-void-biosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a14acd51b16527de68df05b7eba63021818a88f6afa51641dce35a4440aa5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187247 Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8349dbfa155f2d339ef3fd2ea67bde24011b09acb828ba410014298d1394d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116822

Malicious code in aldebaran-grus-playwright-exec npm...

Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121269

Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...

Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114573

Malicious code in deneb-celeste-grus-winston npm...

EUVD-2025-111205

Malicious code in meteor-foundation-callback-grus npm...

EUVD-2025-123490

Malicious code in postgres-figures-wezen-grus npm...

Malicious code in package-canopus-cluster-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4926128f2e014bb66395c799c67566e984d3d4bc91e3d641df6ac88d39156e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113020

Malicious code in grus-envconfig-halley-upgrade npm...

MAL-2025-143082 Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-barnard-algol-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a41843bb97afd8f42d65fdb530b4f04cdbf9e62375b7e006bad94d857d4c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113030

Malicious code in grus-avior-sirius-postcss npm...