EUVD-2025-175444

Malicious code in yildun-cors-convict-ursa npm...

EUVD-2025-175765

Malicious code in ursa-lynx-baryon-ophiuchus npm...

EUVD-2025-178460

Malicious code in ichnology-ursa-petrology-cluster npm...

EUVD-2025-178716

Malicious code in geodynamo-ursa-coronalmassejection-elara npm...

EUVD-2025-175886

Malicious code in transport-ursa-spinner-pulsar npm...

Malicious code in pino-pretty-ariel-ursa-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8542974294f7b08d56d4663d4c85ce4e855d42cc2fd27671470865ae06213649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176262

Malicious code in spectron-ursa-yonder-command npm...

MAL-2025-185405 Malicious code in airbnb-ariel-spectroscopy-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19845f065d4c024064f3ec180048657e93ef017b2ffdb1aac5409b028db8f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178309

Malicious code in janus-greatfilter-cosmiconfig-ursa npm...

EUVD-2025-177937

Malicious code in materialize-pegasus-typeorm-ursa npm...

EUVD-2025-175772

Malicious code in ursa-auth0-delphinus-nodejs npm...

Malicious code in eclipse-ursa-element-ui-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186682 Malicious code in eclipse-ursa-element-ui-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176680

Malicious code in resolvers-chakra-ui-bootstrap-ursa npm...

EUVD-2025-175757

Malicious code in ursa-testcafe-innercore-planckscale npm...

EUVD-2025-180483

Malicious code in airbnb-ariel-spectroscopy-ursa npm...

EUVD-2025-178263

Malicious code in joviology-nuxtjs-ursa-lacerta npm...

EUVD-2025-177173

Malicious code in pino-pretty-ariel-ursa-query npm...

EUVD-2025-176363

Malicious code in sirius-astroinformatics-ursa-futurology npm...