253 matches found
EUVD-2025-113019
Malicious code in grus-jwt-transform-ceres npm...
Malicious code in grus-jwt-transform-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113365
Malicious code in fusion-rollup-plugin-hexo-grus npm...
EUVD-2025-116111
Malicious code in betelgeuse-mongodb-command-grus npm...
EUVD-2025-113006
Malicious code in grus-ursa-ganymede-semantic-ui npm...
EUVD-2025-111388
Malicious code in markdownlint-sedna-flare-grus npm...
EUVD-2025-121721
Malicious code in spinner-node-config-sync-grus npm...
EUVD-2025-113028
Malicious code in grus-barnard-algol-duplex npm...
EUVD-2025-116316
Malicious code in avior-solis-grus-run-script npm...
EUVD-2025-113029
Malicious code in grus-backend-webdriver-mocha-transform npm...
EUVD-2025-124056
Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...
EUVD-2025-113082
Malicious code in gravity-release-it-grus-hermes npm...
Malicious code in grus-celeste-rigel-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6cbe3104473c89681dcb17aab589481bd73d3e1aba87657a38f2fcf233299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113030
Malicious code in grus-avior-sirius-postcss npm...
EUVD-2025-113004
Malicious code in grus-vulcan-postcss-terser npm...
EUVD-2025-114762
Malicious code in csv-markdownlint-npm-grus npm...
EUVD-2025-113024
Malicious code in grus-chai-library-commitlint-config-angular npm...
Malicious code in grus-ora-cosmiconfig-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...