MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142565 Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149100 Malicious code in vega-websockets-xenos-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3e6d08eea3c219f483b46b25ddf71b0bef83e3ad8e1f1c0ab3c195e3b5b306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149361 Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146702 Malicious code in protractor-webdriver-mocha-bootstrap-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988ea1acfef0fe0dbc0115af5b950892ce7e7ce4aa468ac0006e0be8a6cb6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144816 Malicious code in meissa-mocha-jsonp-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83edc36d37b3d9e117d48042f951af1920347abc4aedbb3249617799e47e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146152 Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d986962622d6e31c6fc296c05851bff7c88a99756365beddbc2485d7ce2d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143255 Malicious code in helmet-mui-eslint-plugin-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3ecfc9ebd051b1684c5e2b349a06ee960d316c0caadbaed438ddd4fc9bd863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121069

Malicious code in typeorm-toml-mocha-capella npm...

MAL-2025-149852 Malicious code in zenith-got-mocha-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa733062f7441efab83dce9ac40ecef18f9055a003dc18b310395041acc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124825

Malicious code in mocha-thuban-miranda-juno npm...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112624

Malicious code in hyperion-mocha-start-hermes npm...