EUVD-2025-116890

Malicious code in adonis-inquirer-webdriver-mocha-publish npm...

EUVD-2025-113564

Malicious code in fomalhaut-phoebe-mocha-miranda npm...

EUVD-2025-122003

Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint npm...

EUVD-2025-112312

Malicious code in janus-callisto-colors-mocha npm...

Malicious code in bulma-webdriver-mocha-chariklo-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76f4befed367725c54fd0a28c5edda5b5d5e711a7c93746a910206e99aaaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120576

Malicious code in webdriver-mocha-leda-vortex-zenobia npm...

EUVD-2025-120580

Malicious code in webdriver-mocha-grus-zenobia-sass-loader npm...

EUVD-2025-124853

Malicious code in mocha-aldebaran-nashira-node-config npm...

EUVD-2025-113535

Malicious code in forever-webdriver-mocha-testcafe-chai npm...

EUVD-2025-124846

Malicious code in mocha-dorado-europa-configstore npm...

EUVD-2025-113972

Malicious code in equinox-wezen-mocha-cors npm...

EUVD-2025-122140

Malicious code in sedna-pavo-mocha-ora npm...

EUVD-2025-112766

Malicious code in hexo-mocha-carpo-element-ui npm...

EUVD-2025-111456

Malicious code in magellan-reveal-md-release-it-mocha npm...

Malicious code in mocha-ganymede-dependencies-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbf7f214a0fd32e6dffcfce3cd4db712ae91ae3fc1f73988bdf26b98e0d7c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111774

Malicious code in less-mocha-slides-umbriel npm...

EUVD-2025-120201

Malicious code in xml-mocha-restart-semantic-release npm...

EUVD-2025-124801

Malicious code in module-standard-ora-mocha npm...

EUVD-2025-121008

Malicious code in umbra-mdx-algol-webdriver-mocha npm...

Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...