EUVD-2025-112665

Malicious code in hydra-neptune-ursa-jest npm...

EUVD-2025-114096

Malicious code in eleventy-ursa-vuetify-fornax npm...

Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120890

Malicious code in ursa-andromeda-avior-nestjs npm...

Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112613

Malicious code in hyperion-sedna-umbra-ursa npm...

EUVD-2025-124617

Malicious code in nconf-apollo-ursa-callback npm...

EUVD-2025-121123

Malicious code in transport-ursa-lyra-yakutsk npm...

EUVD-2025-120790

Malicious code in version-loopback-ursa-charon npm...

EUVD-2025-123423

Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...

EUVD-2025-121510

Malicious code in sync-centaurus-gacrux-ursa npm...

Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120851

Malicious code in ursa-venus-terser-luna npm...

Malicious code in nuxtjs-draco-jekyll-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4c5bf59cb51cffcb6db9d40e5ca9295d082a2e8f6ab9d0beff342779612cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120860

Malicious code in ursa-protractor-eleventy-antares npm...

EUVD-2025-113221

Malicious code in gemini-arcturus-ursa-sass-loader npm...

Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115419

Malicious code in changelog-typeorm-ursa-europa npm...

Malicious code in link-ursa-nova-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d6e84b842283cf109ff27c3aac47525e74f91b0b9e53ef219fb4ccfa1c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...