Encyclopedia
npm◆ MEDIUMtyposquat⚠ ACTIVE THREAT

gruntcli

First seen: Sep 29, 2026 0 viewsMimics: grunt-cli
Share threatHN
Threat Description

A typosquat of grunt-cli from the August 2017 npm typosquat campaign. It impersonated the Grunt task runner's CLI with a concatenated name and carried the campaign's data-collection postinstall payload, amassing around 67 downloads.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove gruntcli and install the legitimate grunt-cli. 2. Rotate npm tokens exposed during the window. 3. Audit for typosquatted names. 4. Pin dependencies by hash.
View on registry
Quick Facts
Ecosystem
npm
Risk Level
MEDIUM
Type
typosquat
Status
ACTIVE
Legitimate Package
grunt-cli
Hallucination Confidence
0%
Check My Project
Scan for this package