Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123348

Malicious code in process-writable-gacrux-semantic-ui npm...

EUVD-2025-124051

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql npm...

EUVD-2025-122069

Malicious code in semantic-ui-perseus-firebase-cypress npm...

EUVD-2025-122137

Malicious code in sedna-pino-semantic-ui-unuk npm...

EUVD-2025-124491

Malicious code in nightmare-callisto-phenomic-semantic-ui npm...

MAL-2025-149895 Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149835 Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-global-orbit-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff00da8a18770fad505f5af64be0dda74e2e3a6e3210f93b59c825b25e84dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115281

Malicious code in cluster-gemini-jekyll-semantic-ui npm...

Malicious code in pegasus-redis-jwt-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029211974165cff66e42351cf6175e104e89284a986f021fc112f1c0b00c02c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123419

Malicious code in prettier-semantic-ui-sagitta-tethys npm...

Malicious code in zenith-selenium-library-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a5397d1d1c661e3a6500425713dc90e749fb26cffa81cbe95d446a18798b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124764

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui npm...

EUVD-2025-120292

Malicious code in xanthus-xerxes-zenith-semantic-ui npm...

EUVD-2025-120263

Malicious code in xenon-ursa-semantic-ui-firebase npm...

EUVD-2025-115790

Malicious code in callback-semantic-ui-pulsar-telesto npm...

MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147851 Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbdad42f05ae6cec01ed8b7b3e027c1b1386cd3c563a1ec7aeef9f8f1e1e54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...