EUVD-2025-116176

Malicious code in bellatrix-axios-babel-element-ui npm...

EUVD-2025-116905

Malicious code in achernar-geckodriver-element-ui-shelljs npm...

EUVD-2025-114124

Malicious code in element-ui-version-release-it-deneb npm...

EUVD-2025-113879

Malicious code in eslint-plugin-element-ui-hyperion-dagda npm...

EUVD-2025-114131

Malicious code in element-ui-prettier-css-loader-elara npm...

EUVD-2025-114123

Malicious code in element-ui-winston-html-webpack-plugin-npm npm...

EUVD-2025-122932

Malicious code in quito-betelgeuse-ursa-element-ui npm...

Malicious code in husky-element-ui-rest-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e267c7ffdbac3e4225e8420bd262444e2671ef1ee693768e182ede4033de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123293

Malicious code in procyon-zephyr-antares-element-ui npm...

Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113452

Malicious code in fornax-unuk-element-ui-pyxis npm...

EUVD-2025-114141

Malicious code in element-ui-gemini-got-ursa npm...

Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114473

Malicious code in development-telesto-element-ui-levels npm...

EUVD-2025-114146

Malicious code in element-ui-charon-juno-hermes npm...

MAL-2025-141987 Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141965 Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124792

Malicious code in mongodb-element-ui-apollo-hermes npm...

Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...