459 matches found
EUVD-2025-120876
Malicious code in ursa-cypress-perseus-spinner npm...
EUVD-2025-116425
Malicious code in auriga-figures-karma-ursa npm...
EUVD-2025-114548
Malicious code in deneb-ursa-karma-javascript npm...
EUVD-2025-111248
Malicious code in mensa-typeorm-node-sass-ursa npm...
EUVD-2025-121992
Malicious code in shelljs-ursa-fornax-luna npm...
Malicious code in ursa-jwt-lacerta-terser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef56c704920dd44671d3c0efe77e25cf3249240f4fe7d77f265fe02e8a816a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120869
Malicious code in ursa-jupiter-antares-hyperion npm...
EUVD-2025-111684
Malicious code in link-ursa-nova-rimraf npm...
EUVD-2025-113119
Malicious code in got-ursa-css-minimizer-webpack-plugin-redis npm...
EUVD-2025-120882
Malicious code in ursa-centaurus-writable-jupiter npm...
Malicious code in ursa-loopback-start-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b25c5a49bd65dbc94fc59c560e21bfdcc8bd4f0963dc090dff5f430428d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120873
Malicious code in ursa-express-buffer-commitizen npm...
EUVD-2025-120858
Malicious code in ursa-reveal-md-antares-markdownlint npm...
EUVD-2025-123270
Malicious code in promise-typeorm-halley-ursa npm...
EUVD-2025-120168
Malicious code in yakutsk-config-mutation-ursa npm...
EUVD-2025-120853
Malicious code in ursa-spawn-writable-acamar npm...
Malicious code in promise-ursa-testcafe-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...