EUVD-2025-115487

Malicious code in chakra-ui-lint-webpack-yildun npm...

Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112028

Malicious code in jwt-semantic-ui-nuxtjs-library npm...

EUVD-2025-124792

Malicious code in mongodb-element-ui-apollo-hermes npm...

Malicious code in rollup-proxima-semantic-ui-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122082

Malicious code in semantic-ui-cluster-hermes-postcss-loader npm...

Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112119

Malicious code in jsonp-configstore-janus-semantic-ui npm...

Malicious code in semantic-ui-global-orbit-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff00da8a18770fad505f5af64be0dda74e2e3a6e3210f93b59c825b25e84dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113006

Malicious code in grus-ursa-ganymede-semantic-ui npm...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-pm2-event-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113051

Malicious code in grunt-element-ui-sqlite-request npm...

EUVD-2025-116764

Malicious code in alphard-pulsar-umbriel-chakra-ui npm...

EUVD-2025-114145

Malicious code in element-ui-cypress-rimraf-zenobia npm...

EUVD-2025-116167

Malicious code in bellatrix-element-ui-native-graphql npm...

EUVD-2025-114122

Malicious code in element-ui-xerxes-elara-eris npm...

EUVD-2025-121319

Malicious code in testcafe-winston-callisto-element-ui npm...

MAL-2025-139197 Malicious code in achernar-geckodriver-element-ui-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...