MAL-2025-141408 Malicious code in cypress-spectron-webdriver-postcss-loader-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9004015efc26bc63079bdc2119e23f358925b71bd0299f5a291f905eaf10e567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148465 Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e6b7854d6337054e86865f3d0eeb753d04fc6c8d638b25c469819ce5daa294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120577

Malicious code in webdriver-mocha-leda-prettier-oberon npm...

EUVD-2025-111750

Malicious code in levels-spectron-webdriver-callisto-babel npm...

EUVD-2025-120586

Malicious code in webdriver-mocha-ceres-luna-markdown-pdf npm...

EUVD-2025-113229

Malicious code in geckodriver-spectron-webdriver-chariklo-sequelize npm...

Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055ec0f2807c9f58b686c8b3747d316d6d0ca5fb31a450e20d2d6a57d9b1d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-reveal-md-enif-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370180c2f129f15a2de150851321c58aca4d76bfa479fa7d138492a2d75d83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-mdx-algol-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758df8ad0479ec84fe2bca604e978cb5b21d81fde691a36929909537f3b785e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139692 Malicious code in auriga-umbra-webdriver-manager-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ae286dcec88ddb773dc3009ad79010cb25780803bc6a76fa3bf2d1b52c5ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149227 Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02af8e5f5322a6dd20faee018c741ee859aab71d39ab4c17c10a576073f4f1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148132 Malicious code in spectron-webdriver-gulp-quasar-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111357

Malicious code in materialize-winston-rate-limiter-webdriver-mocha npm...

MAL-2025-149100 Malicious code in vega-websockets-xenos-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3e6d08eea3c219f483b46b25ddf71b0bef83e3ad8e1f1c0ab3c195e3b5b306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140983 Malicious code in commitlint-exec-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a29c972093ebe62f0e65806d1b9a7bbb36b4ced01737a961f52681337efd871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143443 Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...