EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

EUVD-2025-122707

Malicious code in relay-zenobia-webdriver-mocha-jekyll npm...

EUVD-2025-116096

Malicious code in betelgeuse-slidev-webdriver-mocha-duplex npm...

Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123365

Malicious code in process-mocha-loop-colors npm...

EUVD-2025-120574

Malicious code in webdriver-mocha-metalsmith-ignite-fornax npm...

EUVD-2025-112410

Malicious code in io-non-blocking-hermes-mocha npm...

EUVD-2025-124823

Malicious code in mocha-typeorm-regulus-proxima npm...

EUVD-2025-112339

Malicious code in jabbah-deimos-fornax-webdriver-mocha npm...

EUVD-2025-114153

Malicious code in elektra-zenobia-webdriver-mocha-async npm...

MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-mocha-colors-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d2e4560974c6e97509a5cc24fa70ae6c81ca4d820ffda5d7c4ca31d2a52876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121097

Malicious code in triton-webdriver-mocha-hercules-sails npm...

EUVD-2025-120573

Malicious code in webdriver-mocha-mini-css-extract-plugin-acamar-magellan npm...

EUVD-2025-124297

Malicious code in non-blocking-stream-achernar-webdriver-mocha npm...

EUVD-2025-115079

Malicious code in config-lynx-bulma-webdriver-mocha npm...

EUVD-2025-111863

Malicious code in lacerta-rest-mocha-foundation npm...

Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...