EUVD-2025-175603

Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config npm...

EUVD-2025-178269

Malicious code in jovian-postgres-webdriver-mocha-await npm...

EUVD-2025-179439

Malicious code in cygnus-umbra-webdriver-mocha-docusaurus npm...

EUVD-2025-178264

Malicious code in joviology-mocha-cluster-redshift npm...

EUVD-2025-179974

Malicious code in brane-mocha-elektra-farout npm...

EUVD-2025-175602

Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina npm...

EUVD-2025-179485

Malicious code in cryonics-neutronstar-webdriver-mocha-whitedwarf npm...

EUVD-2025-175388

Malicious code in zooarchaeology-mocha-markdown-neptunology npm...

EUVD-2025-178250

Malicious code in juno-areology-dorado-webdriver-mocha npm...

Malicious code in uglify-js-gatsby-mocha-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35678a78049826e95243c5ef05b567ec7a727ae22384d50851840ccd22a90cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178562

Malicious code in helios-webdriver-mocha-superposition-phylogenetics npm...

EUVD-2025-177792

Malicious code in mocha-solis-zenobia-norma npm...

EUVD-2025-179960

Malicious code in buffer-mocha-astrophysics-technosignature npm...

Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180426

Malicious code in antares-aurora-mocha-corvus npm...

EUVD-2025-175607

Malicious code in webdriver-mocha-browserify-polaris-cache npm...

EUVD-2025-176542

Malicious code in sails-soap-link-webdriver-mocha npm...

EUVD-2025-175608

Malicious code in webdriver-mocha-apollo-server-shelljs npm...

MAL-2025-187329 Malicious code in helmet-sirius-ini-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28596c89ad05b7cfce43316b2195edd20ec7abf4c674d1643d0d8217999fb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190270 Malicious code in webdriver-mocha-chromedriver-javascript-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff18fb79385e40ba330557cf38ecb7cb89a1f3b9f6e2e126a10bf6dbafe79b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...