EUVD-2025-115153

Malicious code in commitlint-chai-wasat-socketio npm...

EUVD-2025-124436

Malicious code in nightwatch-sails-ganymede-chai npm...

MAL-2025-145485 Malicious code in nightwatch-sails-ganymede-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ea4a6bd86777913b9e895810654aab55c148a31c0fd044300c2edbed524768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-library-nebula-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51633b5eb10d91cac3ec86fe2365ae8450373b723b5074e954f4a5c87df7bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149151 Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142707 Malicious code in frontend-magellan-metalsmith-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfaded5a35d94f132a6c8896414ddf1d3d52e9a23f4b571443e2689ecd34e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44037

Malicious code in chai-as-sorted npm...

Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...

MAL-2025-55022 Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...

Malicious Package

Overview chai-as-sorted is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49380 Malicious code in chai-await-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad46eab8b628ea50c737795204bf86f36069b9577310c833ea00a469024ec0b The package chai-await-test was found to contain malicious code. Source: ghsa-malware 47ca275095dc49120d03c89b6b2192f62339069acbd6717fc39d06c04c07037...

EUVD-2025-38231

Malicious code in chai-await-test npm...

Malicious Package

Overview chai-await-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in chai-await-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad46eab8b628ea50c737795204bf86f36069b9577310c833ea00a469024ec0b The package chai-await-test was found to contain malicious code. Source: ghsa-malware 47ca275095dc49120d03c89b6b2192f62339069acbd6717fc39d06c04c07037...

EUVD-2025-36851

Malicious code in chai-friendly npm...

Malicious code in chai-friendly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91de03ddaa79c1b3653f7324f3c8a2041bc2e0eb7082649efe9ee495d1a4eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...