EUVD-2025-113535

Malicious code in forever-webdriver-mocha-testcafe-chai npm...

EUVD-2025-124884

Malicious code in miranda-frontend-luna-webdriver-mocha npm...

Malicious code in mocha-nightwatch-yildun-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6889601924e6738e9d197d5c09de3440eda1569d4c41f88d23c7182daf80ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144816 Malicious code in meissa-mocha-jsonp-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83edc36d37b3d9e117d48042f951af1920347abc4aedbb3249617799e47e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149852 Malicious code in zenith-got-mocha-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa733062f7441efab83dce9ac40ecef18f9055a003dc18b310395041acc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120574

Malicious code in webdriver-mocha-metalsmith-ignite-fornax npm...

EUVD-2025-111763

Malicious code in levels-canopus-webdriver-mocha-spectron npm...

EUVD-2025-120571

Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables npm...

EUVD-2025-120577

Malicious code in webdriver-mocha-leda-prettier-oberon npm...

EUVD-2025-114922

Malicious code in cosmiconfig-mocha-mdx-phoebe npm...

EUVD-2025-113547

Malicious code in forever-configstore-markdownlint-webdriver-mocha npm...

MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147160 Malicious code in regulus-xenos-equinox-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f00ee715a6b212756150541df12747f82da8999758b0c2a03c3427413e7677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143529 Malicious code in ignite-supervisor-mocha-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c036900e6f404ea72aa85a4bf54d4a73318c1e65912111e0b97c5588f50e239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120582

Malicious code in webdriver-mocha-exec-juno-lint-staged npm...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143954 Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147663 Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc8eca7c38080fbb463c3fef2953cb87fce95338e8574846d4a53c9f715036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...