EUVD-2025-113409

Malicious code in frontend-firebase-websockets-ursa npm...

EUVD-2025-116253

Malicious code in babel-cluster-zenith-ursa npm...

EUVD-2025-122595

Malicious code in resolvers-init-ursa-docusaurus npm...

Malicious code in protractor-ursa-stop-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112673

Malicious code in hydra-duplex-ursa-less npm...

EUVD-2025-116014

Malicious code in bootes-postgres-module-ursa npm...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139190 Malicious code in acamar-vuepress-ursa-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f4ec718925e3509cfff8579ddfc34ac0e0bb9a3052dc2648a9e233c27deb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120859

Malicious code in ursa-rehype-charon-eslint-plugin npm...

EUVD-2025-123378

Malicious code in private-ursa-terser-capella npm...

EUVD-2025-120862

Malicious code in ursa-phoebe-kaus-cosmos npm...

EUVD-2025-120857

Malicious code in ursa-rocket-postcss-janus npm...

EUVD-2025-122892

Malicious code in rate-limiter-babel-package-ursa npm...

EUVD-2025-120848

Malicious code in ursa-xerxes-betelgeuse-semantic-ui npm...

EUVD-2025-124427

Malicious code in nightwatch-ursa-triton-frontend npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

EUVD-2025-111684

Malicious code in link-ursa-nova-rimraf npm...

EUVD-2025-116425

Malicious code in auriga-figures-karma-ursa npm...

MAL-2025-141680 Malicious code in docusaurus-taurus-ursa-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412a38780f9ef1235e40c5e9de72c1cafe180f43887db2c96e49230dbe5767f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...