EUVD-2025-115839

Malicious code in cache-chakra-ui-leda-cygnus npm...

EUVD-2025-115488

Malicious code in chakra-ui-lacerta-tethys-protractor npm...

EUVD-2025-122932

Malicious code in quito-betelgeuse-ursa-element-ui npm...

EUVD-2025-122077

Malicious code in semantic-ui-fork-development-jest npm...

Malicious code in husky-element-ui-rest-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e267c7ffdbac3e4225e8420bd262444e2671ef1ee693768e182ede4033de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123293

Malicious code in procyon-zephyr-antares-element-ui npm...

Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113452

Malicious code in fornax-unuk-element-ui-pyxis npm...

EUVD-2025-114141

Malicious code in element-ui-gemini-got-ursa npm...

Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112033

Malicious code in jwt-markdownlint-chakra-ui-sadr npm...

EUVD-2025-114473

Malicious code in development-telesto-element-ui-levels npm...

Malicious code in ophiuchus-impulse-google-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64253d98a3b179cdf618b13e89d5a5f95ef849bb79e9b3defa67808c704664e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111646

Malicious code in lint-staged-terser-chakra-ui-node-config npm...

EUVD-2025-114146

Malicious code in element-ui-charon-juno-hermes npm...

EUVD-2025-124001

Malicious code in orbit-xml-nightwatch-chakra-ui npm...

EUVD-2025-115487

Malicious code in chakra-ui-lint-webpack-yildun npm...

Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140627 Malicious code in chakra-ui-scripts-procyon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deca403d973cf24a4f66fb36e71f489da94a83ac29e15ce9fae18fc46d6f6811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139926 Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...