EUVD-2025-124001

Malicious code in orbit-xml-nightwatch-chakra-ui npm...

EUVD-2025-120796

Malicious code in version-chakra-ui-chariklo-rehype npm...

EUVD-2025-114145

Malicious code in element-ui-cypress-rimraf-zenobia npm...

EUVD-2025-115692

Malicious code in carina-meissa-element-ui-blitz npm...

Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-lynx-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e0af512198e413bd0da9e0fbed417f8a39382fb085a429d28eaec3405abc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116593

Malicious code in apollo-element-ui-magellan-sedna npm...

EUVD-2025-123348

Malicious code in process-writable-gacrux-semantic-ui npm...

EUVD-2025-124051

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql npm...

EUVD-2025-122069

Malicious code in semantic-ui-perseus-firebase-cypress npm...

EUVD-2025-122137

Malicious code in sedna-pino-semantic-ui-unuk npm...

EUVD-2025-115045

Malicious code in configstore-semantic-ui-iota-google npm...

EUVD-2025-124491

Malicious code in nightmare-callisto-phenomic-semantic-ui npm...

Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112042

Malicious code in jwt-element-ui-jekyll-style-loader npm...

EUVD-2025-112619

Malicious code in hyperion-odin-element-ui-fornax npm...

MAL-2025-142581 Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...