462 matches found
0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2114 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)
undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...
EUVD-2025-178040
Malicious code in local-ursa-karma-mysql npm...
Malicious code in local-ursa-karma-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175758
Malicious code in ursa-rest-fetch-thermochronology npm...
EUVD-2025-179200
Malicious code in eclipse-ursa-element-ui-middleware npm...
EUVD-2025-176262
Malicious code in spectron-ursa-yonder-command npm...
EUVD-2025-180424
Malicious code in antares-cluster-ursa-javascript npm...
MAL-2025-189989 Malicious code in transport-ursa-spinner-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af491f95d646d3d4421bbe34372859a3bc57e2f6d476a3d03eda099aaecb9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177937
Malicious code in materialize-pegasus-typeorm-ursa npm...
EUVD-2025-177593
Malicious code in nightwatch-loopback-delphinus-ursa npm...
EUVD-2025-178949
Malicious code in extremophile-geochemistry-dendrochronology-ursa npm...
EUVD-2025-175768
Malicious code in ursa-hawkingradiation-pulsar-superagent npm...
MAL-2025-190119 Malicious code in ursa-weywot-ursa-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af13a9ae5e40d4933f48125c84ec5c03162682d0da79c769bd6dbb8c3c3589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-loopback-delphinus-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185382 Malicious code in achernar-ursa-server-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eclipse-ursa-element-ui-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179413
Malicious code in dagda-ganymede-fornax-ursa npm...
EUVD-2025-180483
Malicious code in airbnb-ariel-spectroscopy-ursa npm...