EUVD-2025-111138

Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright npm...

EUVD-2025-120921

Malicious code in upgrade-chromedriver-typeorm-flare npm...

EUVD-2025-116809

Malicious code in algol-chromedriver-pegasus-kronos npm...

EUVD-2025-112910

Malicious code in heka-chromedriver-relay-dorado npm...

EUVD-2025-114950

Malicious code in corvus-luna-chromedriver-sync npm...

EUVD-2025-123500

Malicious code in postcss-relay-chromedriver-vega npm...

MAL-2025-145344 Malicious code in nebula-hyperion-chromedriver-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f0cb38df1a8181ec17f4e0a0c4f4e5d50074dc19faf9a14da0603b416ba956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149708 Malicious code in xerxes-jsonp-castor-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140762 Malicious code in chromedriver-await-enceladus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b544cd03ff385e714b7cd27f9fc9b522f3926092527344be2f153f530040db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141155 Malicious code in corvus-forever-ophiuchus-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad127b135587bc52e235a692a553f73b4d01a14c9268345dfa2eba252211511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145885 Malicious code in ora-hyperion-websockets-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca76291d113540f0d1d9604ebedb3d9c349de49debb0c7a3d328fa724a726cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140763 Malicious code in chromedriver-commitlint-norma-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4390bddba6c156cdbddcb8d6bc99d4da0ef1749ac02717b10d2e53803f68fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140778 Malicious code in chromedriver-metalsmith-toml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a4ebf7ac7382de09ed462478b2c913c3b9a9bf86d0bb11b53ad48aa1a13c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140775 Malicious code in chromedriver-init-puppeteer-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49a1d7b193d8a87479483ff68d7ca0e80df416c37632675238e86d325d53a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140770 Malicious code in chromedriver-farout-link-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b058b79d3d9929bb06e60f1a798f4455a9259984cede8d69b8d1b47d524165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140765 Malicious code in chromedriver-deneb-auriga-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195fea34eacdb423bea8abd3996ce12a0dbdd074896f23f92547b9d6e20087bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...