MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115486

Malicious code in chakra-ui-neptune-eslint-koa npm...

EUVD-2025-115497

Malicious code in chakra-ui-command-passport-kastra npm...

Malicious code in kinetic-jabbah-chakra-ui-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5f738782dd363d152db805403c855d082f0f118291fd3c2a9d542055b894bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-123646

Malicious code in playwright-chakra-ui-ora-hapi npm...

EUVD-2025-112503

Malicious code in ini-vuetify-test-chakra-ui npm...

EUVD-2025-115494

Malicious code in chakra-ui-eslint-toml-react-bootstrap npm...

EUVD-2025-115061

Malicious code in configstore-dotenv-safe-chakra-ui-corvus npm...

EUVD-2025-116308

Malicious code in await-castor-middleware-chakra-ui npm...

EUVD-2025-112442

Malicious code in install-chakra-ui-loopback-antares npm...

EUVD-2025-112419

Malicious code in io-elektra-chakra-ui-configstore npm...

EUVD-2025-113555

Malicious code in forever-algol-react-bootstrap-chakra-ui npm...

EUVD-2025-121463

Malicious code in taurus-chakra-ui-quantum-webdriver-manager npm...

EUVD-2025-115488

Malicious code in chakra-ui-lacerta-tethys-protractor npm...

EUVD-2025-115489

Malicious code in chakra-ui-jekyll-algol-prompts npm...

Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111646

Malicious code in lint-staged-terser-chakra-ui-node-config npm...

EUVD-2025-122337

Malicious code in sagitta-chakra-ui-nightmare-oauth npm...

EUVD-2025-120558

Malicious code in webdriverio-impulse-chakra-ui-luna npm...