248 matches found
Malicious code in apollo-hapi-soap-testcafe (npm)
Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview bellatrix-command-testcafe-pino-pretty is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious code in aldebaran-electron-builder-subscription-testcafe (npm)
Source: amazon-inspector 8abc784a8bf74e36e8288aef1dd04e6dec28384acd38f24ddb4017757aebd310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in achernar-ursa-server-testcafe (npm)
Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in accretion-vulcan-testcafe-subscription (npm)
The package accretion-vulcan-testcafe-subscription was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview hermes-testcafe-toml-nextjs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2025-175978
Malicious code in testcafe-markdownlint-antares-jsonp npm...
EUVD-2025-178029
Malicious code in loglevel-testcafe-spectron-leda npm...
Malicious code in bellatrix-command-testcafe-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b703a2d20efa32ac0ae07b76175be8aa18b3f4ebfa944f7d27fafa977a66963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175982
Malicious code in testcafe-canopus-graphql-markdownlint npm...
Malicious code in cors-warp-farout-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b58f1af8bf82671c841b76a10d8e68246dcd60737603893aef17271bd3c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in testcafe-chalk-magellan-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in testcafe-titan-fornax-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189896 Malicious code in testcafe-jsonp-lyra-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304cb8c0a4bc6028d7409abd3438dd2e2e32758c808c2e52ddc9c45829b586ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185382 Malicious code in achernar-ursa-server-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175981
Malicious code in testcafe-chalk-magellan-figures npm...
EUVD-2025-175980
Malicious code in testcafe-janus-sqlite-bulma npm...
EUVD-2025-175977
Malicious code in testcafe-miranda-electron-umbriel npm...