EUVD-2025-123769

Malicious code in phoebe-gravity-pegasus-webdriver-mocha npm...

EUVD-2025-124840

Malicious code in mocha-graphql-alphard-sirius npm...

EUVD-2025-120302

Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...

EUVD-2025-123614

Malicious code in pm2-query-mocha-halley npm...

EUVD-2025-124834

Malicious code in mocha-kastra-proxima-lynx npm...

EUVD-2025-115029

Malicious code in convict-mocha-castor-proxima npm...

EUVD-2025-115079

Malicious code in config-lynx-bulma-webdriver-mocha npm...

Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116543

Malicious code in aquarius-webdriver-mocha-hyperion-cross-env npm...

EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

EUVD-2025-124831

Malicious code in mocha-luna-mdx-prettier npm...

EUVD-2025-121151

Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto npm...

EUVD-2025-124851

Malicious code in mocha-andromeda-castor-loopback npm...

EUVD-2025-114155

Malicious code in elektra-webdriver-mocha-xanadu-javascript npm...

EUVD-2025-120566

Malicious code in webdriver-mocha-xml-spica-wezen npm...

EUVD-2025-122881

Malicious code in rate-limiter-jwt-webdriver-mocha-dotenv npm...

EUVD-2025-116650

Malicious code in antd-async-sagitta-mocha npm...

EUVD-2025-124827

Malicious code in mocha-reveal-md-nextjs-duplex npm...

MAL-2025-142565 Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...