459 matches found
0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2146 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)
undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...
EUVD-2025-178040
Malicious code in local-ursa-karma-mysql npm...
Malicious code in nightwatch-loopback-delphinus-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179200
Malicious code in eclipse-ursa-element-ui-middleware npm...
EUVD-2025-177937
Malicious code in materialize-pegasus-typeorm-ursa npm...
EUVD-2025-176262
Malicious code in spectron-ursa-yonder-command npm...
EUVD-2025-175768
Malicious code in ursa-hawkingradiation-pulsar-superagent npm...
EUVD-2025-178949
Malicious code in extremophile-geochemistry-dendrochronology-ursa npm...
MAL-2025-190119 Malicious code in ursa-weywot-ursa-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af13a9ae5e40d4933f48125c84ec5c03162682d0da79c769bd6dbb8c3c3589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175758
Malicious code in ursa-rest-fetch-thermochronology npm...
EUVD-2025-180424
Malicious code in antares-cluster-ursa-javascript npm...
EUVD-2025-177593
Malicious code in nightwatch-loopback-delphinus-ursa npm...
Malicious code in local-ursa-karma-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185382 Malicious code in achernar-ursa-server-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189989 Malicious code in transport-ursa-spinner-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af491f95d646d3d4421bbe34372859a3bc57e2f6d476a3d03eda099aaecb9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178922
Malicious code in fetch-ursa-vega-grus npm...
EUVD-2025-175767
Malicious code in ursa-inflation-atlas-taphonomy npm...
EUVD-2025-177173
Malicious code in pino-pretty-ariel-ursa-query npm...
Malicious code in oscillation-aquarius-ursa-parallax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7127678160b96508d807efcfe044a57b7f9a9206a3c2546e146450bed08b547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...