EUVD-2025-120872

Malicious code in ursa-hapi-nextjs-epimetheus npm...

EUVD-2025-123504

Malicious code in postcss-neptune-ursa-nextjs npm...

EUVD-2025-112417

Malicious code in io-frontend-jasmine-ursa npm...

EUVD-2025-120866

Malicious code in ursa-meteor-hydra-oberon npm...

EUVD-2025-122816

Malicious code in redis-javascript-ursa-polaris npm...

EUVD-2025-113081

Malicious code in gravity-sadr-uninstall-ursa npm...

EUVD-2025-115412

Malicious code in chariklo-dorado-ganymede-ursa npm...

EUVD-2025-124777

Malicious code in mongodb-spawn-ursa-jasmine npm...

EUVD-2025-114424

Malicious code in dorado-comet-cypress-ursa npm...

Malicious code in chalk-ursa-leda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

EUVD-2025-120880

Malicious code in ursa-charon-server-markdown-pdf npm...

EUVD-2025-120653

Malicious code in warp-ursa-kastra-centauri npm...

EUVD-2025-120208

Malicious code in xerxes-webdriver-manager-ursa-registry npm...

EUVD-2025-113006

Malicious code in grus-ursa-ganymede-semantic-ui npm...

EUVD-2025-122216

Malicious code in scorpius-config-ursa-install npm...

EUVD-2025-112126

Malicious code in json-ursa-css-loader-dotenv npm...

EUVD-2025-112274

Malicious code in janus-ursa-rimraf-telesto npm...

EUVD-2025-120257

Malicious code in xenos-cypress-ursa-callback npm...

EUVD-2025-112242

Malicious code in jasmine-ursa-resolvers-auth npm...