EUVD-2025-111184

Malicious code in meteor-rigel-ursa-hermes npm...

Malicious code in ursa-jwt-lacerta-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef56c704920dd44671d3c0efe77e25cf3249240f4fe7d77f265fe02e8a816a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120858

Malicious code in ursa-reveal-md-antares-markdownlint npm...

MAL-2025-149072 Malicious code in ursa-rocket-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139190 Malicious code in acamar-vuepress-ursa-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f4ec718925e3509cfff8579ddfc34ac0e0bb9a3052dc2648a9e233c27deb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115835

Malicious code in cache-galaxy-titan-ursa npm...

EUVD-2025-114045

Malicious code in enif-ursa-chakra-ui-axios npm...

Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124320

Malicious code in non-blocking-antares-ursa-gulp npm...

EUVD-2025-121048

Malicious code in uglify-js-quito-ursa-fomalhaut npm...

EUVD-2025-120874

Malicious code in ursa-electron-builder-helmet-foundation npm...

EUVD-2025-121992

Malicious code in shelljs-ursa-fornax-luna npm...

EUVD-2025-120876

Malicious code in ursa-cypress-perseus-spinner npm...

MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149041 Malicious code in ursa-apollo-version-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eb449d68a1a78b9ec331359f8f01997194d27f618af0a73724e5259164277c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145141 Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147185 Malicious code in rehype-socketio-arcturus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517b206758d062405fc1f5a4cb182194e74d2f115f80f5bea7031a861c4a0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141680 Malicious code in docusaurus-taurus-ursa-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412a38780f9ef1235e40c5e9de72c1cafe180f43887db2c96e49230dbe5767f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...