EUVD-2025-121318

Malicious code in testcafe-xenon-chakra-ui-nodejs npm...

EUVD-2025-115478

Malicious code in chakra-ui-subscription-vuepress-gulp npm...

Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-selenium-library-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a5397d1d1c661e3a6500425713dc90e749fb26cffa81cbe95d446a18798b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115790

Malicious code in callback-semantic-ui-pulsar-telesto npm...

EUVD-2025-111272

Malicious code in mensa-chakra-ui-acamar-ariel npm...

EUVD-2025-122137

Malicious code in sedna-pino-semantic-ui-unuk npm...

EUVD-2025-115045

Malicious code in configstore-semantic-ui-iota-google npm...

EUVD-2025-124491

Malicious code in nightmare-callisto-phenomic-semantic-ui npm...

EUVD-2025-114124

Malicious code in element-ui-version-release-it-deneb npm...

EUVD-2025-115095

Malicious code in concurrently-standard-bellatrix-element-ui npm...

EUVD-2025-112033

Malicious code in jwt-markdownlint-chakra-ui-sadr npm...

EUVD-2025-112570

Malicious code in impulse-fornax-element-ui-aether npm...

EUVD-2025-114135

Malicious code in element-ui-nestjs-draco-hyperion npm...

EUVD-2025-112611

Malicious code in hyperion-terser-spica-element-ui npm...

EUVD-2025-113537

Malicious code in forever-tailwindcss-orbit-element-ui npm...

EUVD-2025-121388

Malicious code in terser-triton-element-ui-dione npm...

EUVD-2025-114169

Malicious code in elektra-css-minimizer-webpack-plugin-janus-semantic-ui npm...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149419 Malicious code in websockets-dactyl-element-ui-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60df6ca1abf2df23e74ec069e81a2cd86a6d25bb74a68c80edb3ed26271c897e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...