EUVD-2025-121946

Malicious code in sirius-standard-mensa-element-ui npm...

MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140628 Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140609 Malicious code in chakra-ui-comet-style-loader-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f65fcdb29603b945d42935419406e4a2f23453bfa8433eb0a8fe85837cc7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140622 Malicious code in chakra-ui-nodemon-gridsome-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ff566ea2abc806da64457f68e93782465c69d4c39c8050633cf66e6ff174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140610 Malicious code in chakra-ui-command-passport-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78aa8bda85f98b1e6f2ce18f280186996e1d6e9bf6b3e726f5bb83c5fa67937d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146647 Malicious code in promise-registry-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a5c501ec3299dcc8dfa9935e0f26ed824255bb5062b9cb5ddfe62fbd4f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114139

Malicious code in element-ui-jwt-uninstall-iota npm...

EUVD-2025-122073

Malicious code in semantic-ui-kaus-install-centaurus npm...

EUVD-2025-116117

Malicious code in betelgeuse-jovian-galaxy-chakra-ui npm...

Malicious code in capes-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6f39dd3b6ae0e4941ca23e3a41820dc7a088eeaaa0d56622174d29ae219f72 The package capes-ui was found to contain malicious code...

MAL-2025-49018 Malicious code in lfs-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c701260c51375b73d9b993340fc1b603958a46bf115033de75a5a57e7b1acc35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview fq-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview presto-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

Malicious code in kicl-gl-provisioningapp-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hopper-b2b/ui (npm)

The package @hopper-b2b/ui was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-9568 Malicious code in @tsign/tsign-ui (npm)

The package @tsign/tsign-ui was found to contain malicious code...

MAL-2025-23240 Malicious code in innovid-ui (npm)

The package innovid-ui was found to contain malicious code...

Malicious code in citrix-ui (npm)

The package citrix-ui was found to contain malicious code...