Malicious code in janus-ursa-rimraf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa8467d781bb8828c170ff1d24643e2fc2541535f36c7baf5fb0ec62b92371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-virgo-mui-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce18b52cd687aca9cc61151548e7c77706281e6cc27adce28056eb1378cde57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-native-concurrently-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859eb00c4af130b26cb5ce79f6eba7269c3381cfbba2c0655acbeb56b2e3e2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-cassini-ursa-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111315

Malicious code in meissa-cordelia-ursa-bootes npm...

EUVD-2025-122782

Malicious code in regulus-atlas-passport-ursa npm...

EUVD-2025-122737

Malicious code in rehype-socketio-arcturus-ursa npm...

Malicious code in ursa-auth-bunyan-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eada95a2466abcf6454f804708ecb9d74a085996376d2b7ffcb5ca0835786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112506

Malicious code in ini-sirius-ursa-prettier-plugin-markdown npm...

EUVD-2025-116435

Malicious code in atlas-virgo-mui-ursa npm...

EUVD-2025-111653

Malicious code in lint-staged-module-redis-ursa npm...

EUVD-2025-114268

Malicious code in dynamo-ursa-soap-update npm...

EUVD-2025-116772

Malicious code in alphard-mongoose-ursa-gridsome npm...

EUVD-2025-124428

Malicious code in nightwatch-ursa-centaurus-pino-pretty npm...

EUVD-2025-120868

Malicious code in ursa-jwt-lacerta-terser npm...

EUVD-2025-120881

Malicious code in ursa-changelog-prompts-public npm...

EUVD-2025-124394

Malicious code in node-sass-auth-ursa-husky npm...

EUVD-2025-120891

Malicious code in ursa-algol-ganymede-framework npm...

EUVD-2025-120886

Malicious code in ursa-auth-bunyan-taurus npm...

Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...