254 matches found
EUVD-2025-113006
Malicious code in grus-ursa-ganymede-semantic-ui npm...
EUVD-2025-113082
Malicious code in gravity-release-it-grus-hermes npm...
MAL-2025-143475 Malicious code in hyperion-grus-aether-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fecdd0737209befcdd40ff14ff189edd26dc44c878a59f4d80c79df2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124028
Malicious code in ora-quito-grus-rocket npm...
MAL-2025-145893 Malicious code in ora-quito-grus-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113024
Malicious code in grus-chai-library-commitlint-config-angular npm...
MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143108 Malicious code in grus-vulcan-postcss-terser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36086da343f1f0070583626b0a77247b177ec3186f1550f7756ef30c223b78a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143093 Malicious code in grus-jwt-transform-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140410 Malicious code in carina-grus-farout-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7c36dd6030a02c4d9da372d362ada5727f66776678117752fc84d9d6c8ae1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143854 Malicious code in jasmine-grus-nightwatch-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4daf9d787d3a053b657f214222fea06c162724ee8a4fde668874c1b9b122b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123995
Malicious code in package-canopus-cluster-grus npm...
Malicious code in venus-sails-betelgeuse-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113029
Malicious code in grus-backend-webdriver-mocha-transform npm...
EUVD-2025-116087
Malicious code in betelgeuse-writable-grus-build npm...
Malicious code in grus-ora-cosmiconfig-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grus-canopus-mutation-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5664bfa8cb0f8ea74e02667e677c54ce8adf8252363128555627600e9c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...