472 matches found
Malicious Package
Overview link-ursa-nova-rimraf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dagda-ganymede-fornax-ursa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview algol-sagitta-nodejs-ursa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2110 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)
undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...
EUVD-2025-178894
Malicious code in firebase-command-ursa-websockets npm...
Malicious code in eclipse-ursa-element-ui-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180220
Malicious code in auth0-stratigraphy-ursa-cordelia npm...
EUVD-2025-175886
Malicious code in transport-ursa-spinner-pulsar npm...
EUVD-2025-175771
Malicious code in ursa-comet-cosmogenic-virgo npm...
EUVD-2025-179413
Malicious code in dagda-ganymede-fornax-ursa npm...
EUVD-2025-175761
Malicious code in ursa-process-query-metabolomics npm...
EUVD-2025-177593
Malicious code in nightwatch-loopback-delphinus-ursa npm...
EUVD-2025-179009
Malicious code in europa-ursa-tectonophysics-steganography npm...
EUVD-2025-175765
Malicious code in ursa-lynx-baryon-ophiuchus npm...
Malicious code in pino-pretty-ariel-ursa-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8542974294f7b08d56d4663d4c85ce4e855d42cc2fd27671470865ae06213649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176363
Malicious code in sirius-astroinformatics-ursa-futurology npm...
Malicious code in local-ursa-karma-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176262
Malicious code in spectron-ursa-yonder-command npm...