EUVD-2025-115781

Malicious code in callisto-chakra-ui-nova-non-blocking npm...

EUVD-2025-115486

Malicious code in chakra-ui-neptune-eslint-koa npm...

EUVD-2025-112419

Malicious code in io-elektra-chakra-ui-configstore npm...

EUVD-2025-120558

Malicious code in webdriverio-impulse-chakra-ui-luna npm...

EUVD-2025-111100

Malicious code in mira-pino-pretty-chakra-ui-virgo npm...

EUVD-2025-121416

Malicious code in terser-chakra-ui-grunt-janus npm...

Malicious code in procyon-chakra-ui-comet-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b714a9f6285ba1b2dd437b87474dc7b762e38cfcf30a34ac0c236b9fa33d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-115497

Malicious code in chakra-ui-command-passport-kastra npm...

EUVD-2025-112503

Malicious code in ini-vuetify-test-chakra-ui npm...

MAL-2025-140627 Malicious code in chakra-ui-scripts-procyon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deca403d973cf24a4f66fb36e71f489da94a83ac29e15ce9fae18fc46d6f6811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141048 Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111427

Malicious code in markdown-pdf-child-process-chakra-ui-winston npm...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112721

Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...

MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143306 Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140620 Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148465 Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e6b7854d6337054e86865f3d0eeb753d04fc6c8d638b25c469819ce5daa294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139338 Malicious code in alphard-pulsar-umbriel-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a403cde30f3b89e6bdab6ed0efd2615e48746d0458d5f5ccac299ba6ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...