MAL-2025-142687 Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141980 Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141987 Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143415 Malicious code in husky-element-ui-rest-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e267c7ffdbac3e4225e8420bd262444e2671ef1ee693768e182ede4033de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139857 Malicious code in babel-element-ui-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebeca5dc51f6d677f9931369a829d3c0eb57c1863bb8ca1dfa8400cdcc5abf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141986 Malicious code in element-ui-version-release-it-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865c4f0c3c868b74a5c1530d89131152bf8530034a6f47e3bb3c34ae55b9fe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145394 Malicious code in nestjs-element-ui-forever-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0a5776df653e1f7ebe71c31036ef6532e46cb93e04d5acacc500e266aa7bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141965 Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139767 Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141988 Malicious code in element-ui-xerxes-elara-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e8c3b0a75e3d1b6080c8124bc4f5c0c3de6d2e192c28a952d63dcbdc89aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149419 Malicious code in websockets-dactyl-element-ui-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60df6ca1abf2df23e74ec069e81a2cd86a6d25bb74a68c80edb3ed26271c897e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124792

Malicious code in mongodb-element-ui-apollo-hermes npm...

Malicious code in aldebaran-sirius-umbriel-element-ui (npm)

The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...

Malicious code in element-ui-cryptography-gravity-quito (npm)

The package element-ui-cryptography-gravity-quito was found to contain malicious code...

Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...