EUVD-2025-175569

Malicious code in weywot-webdriver-mocha-loglevel-fornax npm...

EUVD-2025-179299

Malicious code in development-webdriver-mocha-leda-bellatrix npm...

EUVD-2025-180224

Malicious code in auth0-corvus-webdriver-mocha-chromedriver npm...

EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

MAL-2025-188687 Malicious code in photon-darkenergy-mocha-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ce42babb790cecb786467b5307818ca1b0a573a280616ec3b158591c55da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122492

Malicious code in rigel-bulma-mocha-janus npm...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120586

Malicious code in webdriver-mocha-ceres-luna-markdown-pdf npm...

EUVD-2025-113029

Malicious code in grus-backend-webdriver-mocha-transform npm...

Malicious code in iota-deneb-quark-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80cbfc864aedcfd8310d41fddce90d2f3a5fbb40bd00045b7d081887b66bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123220

Malicious code in protractor-webdriver-mocha-bootstrap-venus npm...

EUVD-2025-124410

Malicious code in node-config-jasmine-sass-loader-mocha npm...

EUVD-2025-120584

Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig npm...

EUVD-2025-120570

Malicious code in webdriver-mocha-nightwatch-materialize-toml npm...

Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-mdx-algol-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758df8ad0479ec84fe2bca604e978cb5b21d81fde691a36929909537f3b785e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116112

Malicious code in betelgeuse-mocha-request-event npm...

EUVD-2025-124837

Malicious code in mocha-hercules-auth0-weywot npm...

EUVD-2025-120581

Malicious code in webdriver-mocha-geckodriver-alphard-spica npm...

Malicious code in quark-kaus-mocha-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51907e0511e3783ca6d060b1760d416e9bb6c9bf1e56b1a51d5cff0fdfe52283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...