EUVD-2025-116117

Malicious code in betelgeuse-jovian-galaxy-chakra-ui npm...

EUVD-2025-113501

Malicious code in fornax-chakra-ui-wasat-xml npm...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-chakra-ui-standard-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520d1091a873c4269619f99e8e6a1a7b3b45d36e1ade66d7ba940a0be49c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-indus-castor-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559b6440cf8de7895eaea748dfd87f39f1aa885f93498362d0745a609484be05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113945

Malicious code in eris-chakra-ui-sass-loader-fornax npm...

Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115492

Malicious code in chakra-ui-gemini-astro-eslint npm...

EUVD-2025-115490

Malicious code in chakra-ui-indus-castor-betelgeuse npm...

MAL-2025-140631 Malicious code in chakra-ui-vega-express-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0df3b2ac23be1e355e72eb882ad33832dee620205b49d584c3786346b4f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145811 Malicious code in ophiuchus-chakra-ui-release-it-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b02906e9dec6236ba4177faf7870709eab530f6e8617c44e7a1a2b31716e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140611 Malicious code in chakra-ui-cypress-juno-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cdf185ec38aecbc412f7e0635a106bdbaf491f09b8eb1449089a252ce03054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140622 Malicious code in chakra-ui-nodemon-gridsome-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ff566ea2abc806da64457f68e93782465c69d4c39c8050633cf66e6ff174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a73390160c376cfb3e4a5257b5aac4adef6048328297cde111fdbe358c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115495

Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver npm...

MAL-2025-140629 Malicious code in chakra-ui-subscription-vuepress-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33217d1af956169d2508fc5394110c19795450f5fee3645a7f354e8e8a24972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116764

Malicious code in alphard-pulsar-umbriel-chakra-ui npm...

Malicious code in sagitta-chakra-ui-nightmare-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056f665d6e1e48a592cd962a70275782e23b71ab0c7b2b8bb2f3c2cd44ce22ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144843 Malicious code in mensa-chakra-ui-acamar-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9804ce70db2a76211a21007dfe8f7a24a50604bb846a42933064d96c23ada4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...