EUVD-2025-114140

Malicious code in element-ui-html-webpack-plugin-impulse-odin npm...

Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113879

Malicious code in eslint-plugin-element-ui-hyperion-dagda npm...

EUVD-2025-116593

Malicious code in apollo-element-ui-magellan-sedna npm...

Malicious code in regulus-restart-apex-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca1a2d5bad494316f0cc17e801ed97854d99839169829e82bf8c34b2c70be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114135

Malicious code in element-ui-nestjs-draco-hyperion npm...

Malicious code in sirius-standard-mensa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f9a6f0c3f9b13e89a3dc3ede03cf3da159585fe7b70397f5ffe65a67f99d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121846

Malicious code in solis-meteor-element-ui-cluster npm...

EUVD-2025-111816

Malicious code in leda-terser-element-ui-sails npm...

EUVD-2025-121388

Malicious code in terser-triton-element-ui-dione npm...

EUVD-2025-122008

Malicious code in shelljs-hydra-element-ui-supervisor npm...

Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113551

Malicious code in forever-astro-element-ui-epimetheus npm...

MAL-2025-141987 Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139767 Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140415 Malicious code in carina-meissa-element-ui-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec01fdb272c022f85b84fab1b93bc5188f80ff33647b66131c09d9c4b5c438d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...