EUVD-2025-175768

Malicious code in ursa-hawkingradiation-pulsar-superagent npm...

EUVD-2025-176680

Malicious code in resolvers-chakra-ui-bootstrap-ursa npm...

EUVD-2025-177173

Malicious code in pino-pretty-ariel-ursa-query npm...

EUVD-2025-175758

Malicious code in ursa-rest-fetch-thermochronology npm...

EUVD-2025-178949

Malicious code in extremophile-geochemistry-dendrochronology-ursa npm...

EUVD-2025-176262

Malicious code in spectron-ursa-yonder-command npm...

EUVD-2025-175444

Malicious code in yildun-cors-convict-ursa npm...

Malicious code in oscillation-aquarius-ursa-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7127678160b96508d807efcfe044a57b7f9a9206a3c2546e146450bed08b547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175771

Malicious code in ursa-comet-cosmogenic-virgo npm...

EUVD-2025-178230

Malicious code in jwt-ursa-apollo-fornax npm...

EUVD-2025-178894

Malicious code in firebase-command-ursa-websockets npm...

EUVD-2025-180424

Malicious code in antares-cluster-ursa-javascript npm...

EUVD-2025-175759

Malicious code in ursa-readable-astrophysics-wolf npm...

EUVD-2025-175770

Malicious code in ursa-eslint-config-draco-kronos npm...

Malicious code in eclipse-ursa-element-ui-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-loopback-delphinus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ursa-yonder-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8934f9f8a84c3ea9257ecf86439131845b5e98b2fb112a7de097e28279bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175886

Malicious code in transport-ursa-spinner-pulsar npm...

EUVD-2025-175772

Malicious code in ursa-auth0-delphinus-nodejs npm...

EUVD-2025-175767

Malicious code in ursa-inflation-atlas-taphonomy npm...