Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-playwright-levels-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb9f73fa8fd1876ce64591a40e51714d01023c2754d029bd29814b32c7c621a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112295

Malicious code in janus-meissa-avior-playwright npm...

EUVD-2025-115050

Malicious code in configstore-playwright-charon-standard npm...

EUVD-2025-122239

Malicious code in sass-loader-rate-limiter-aurora-playwright npm...

Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-playwright-webpack-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65a6262100bed5290dd85a48aa5f7bb581761effb44cc49ac2311ea29a74b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123634

Malicious code in playwright-stream-playwright-acamar npm...

MAL-2025-147572 Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111459

Malicious code in magellan-playwright-sirius-leda npm...

EUVD-2025-123755

Malicious code in phoebe-oauth-blitz-playwright npm...

EUVD-2025-115576

Malicious code in centauri-inquirer-playwright-scripts npm...

EUVD-2025-123561

Malicious code in polaris-playwright-pino-pretty-transform npm...

EUVD-2025-123637

Malicious code in playwright-meteor-loglevel-enif npm...

Malicious code in ini-playwright-kaus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10504768cad4ee5f79ca1749353e747f46b0967598af7e3d7504dc839a8f3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139280 Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview node-js-playwright-browserstack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

MAL-2025-48744 Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

CVE-2025-34267

Flowise v3.0.1 3.0.8 and all versions after with 'ALLOWBUILTINDEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules Puppeteer and Playwright within the nodevm execution environment. An authenticated attacker...