EUVD-2025-120850

Malicious code in ursa-virgo-less-taurus npm...

Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113492

Malicious code in fornax-fomalhaut-forever-ursa npm...

EUVD-2025-120208

Malicious code in xerxes-webdriver-manager-ursa-registry npm...

EUVD-2025-120854

Malicious code in ursa-shelljs-buffer-rimraf npm...

Malicious code in polaris-postgres-sirius-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114157

Malicious code in elektra-tethys-perseus-ursa npm...

Malicious code in ursa-rocket-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120257

Malicious code in xenos-cypress-ursa-callback npm...

EUVD-2025-113006

Malicious code in grus-ursa-ganymede-semantic-ui npm...

EUVD-2025-124161

Malicious code in octans-antares-ursa-inquirer npm...

EUVD-2025-116503

Malicious code in ariel-ursa-nodemon-rate-limiter npm...

EUVD-2025-120879

Malicious code in ursa-commitlint-transform-mongoose npm...

EUVD-2025-115160

Malicious code in commitizen-ursa-figures-winston npm...

EUVD-2025-120888

Malicious code in ursa-apollo-version-readable npm...

EUVD-2025-124752

Malicious code in mongoose-ursa-csrf-pino-pretty npm...

EUVD-2025-120856

Malicious code in ursa-sass-loader-orbit-async npm...

EUVD-2025-112274

Malicious code in janus-ursa-rimraf-telesto npm...

EUVD-2025-116794

Malicious code in algol-sagitta-nodejs-ursa npm...

Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...