455 matches found
MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143753 Malicious code in izar-cassini-ursa-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116503
Malicious code in ariel-ursa-nodemon-rate-limiter npm...
Malicious code in start-deneb-gacrux-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217f63bece54cd97f2cbf64265aa70fc2de9d8e2e0c835429695d2d46ed483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144700 Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb6fa6a40691312a14cdb3ec297911446378ff71f510e643208327979aae313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149048 Malicious code in ursa-changelog-prompts-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7e4316ad2e5cd206f165f7146db81b01de8cdf3a67430488a7af608beb130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120855
Malicious code in ursa-schema-norma-subscription npm...
MAL-2025-143696 Malicious code in io-frontend-jasmine-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114424
Malicious code in dorado-comet-cypress-ursa npm...
EUVD-2025-111248
Malicious code in mensa-typeorm-node-sass-ursa npm...
EUVD-2025-124427
Malicious code in nightwatch-ursa-triton-frontend npm...
EUVD-2025-123378
Malicious code in private-ursa-terser-capella npm...
EUVD-2025-122553
Malicious code in rest-ursa-chalk-rimraf npm...
EUVD-2025-120849
Malicious code in ursa-winston-slides-neptune npm...
EUVD-2025-124320
Malicious code in non-blocking-antares-ursa-gulp npm...