EUVD-2025-114127

Malicious code in element-ui-spectron-webdriver-mdx-flare npm...

EUVD-2025-121116

Malicious code in triton-cosmos-await-element-ui npm...

MAL-2025-143415 Malicious code in husky-element-ui-rest-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e267c7ffdbac3e4225e8420bd262444e2671ef1ee693768e182ede4033de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145394 Malicious code in nestjs-element-ui-forever-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0a5776df653e1f7ebe71c31036ef6532e46cb93e04d5acacc500e266aa7bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139767 Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

EUVD-2025-114878

Malicious code in cressida-exec-element-ui-farout npm...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142731 Malicious code in fusion-element-ui-browserify-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ceb40b6042bd1dc98340857c23502250ba04d1b033674c17a6d37bb7559a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139857 Malicious code in babel-element-ui-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebeca5dc51f6d677f9931369a829d3c0eb57c1863bb8ca1dfa8400cdcc5abf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114133

Malicious code in element-ui-pino-pretty-miranda-adonis npm...

MAL-2025-141986 Malicious code in element-ui-version-release-it-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865c4f0c3c868b74a5c1530d89131152bf8530034a6f47e3bb3c34ae55b9fe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142216 Malicious code in eslint-element-ui-buffer-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a508dc44f6b649dc11aea2adfd3e0733d721a23e86034b25f378d3064b31a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141965 Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141980 Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

MAL-2025-45945 Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

Malicious code in aldebaran-sirius-umbriel-element-ui (npm)

The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...