EUVD-2025-120168

Malicious code in yakutsk-config-mutation-ursa npm...

EUVD-2025-120869

Malicious code in ursa-jupiter-antares-hyperion npm...

EUVD-2025-122595

Malicious code in resolvers-init-ursa-docusaurus npm...

EUVD-2025-123270

Malicious code in promise-typeorm-halley-ursa npm...

EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

Malicious code in ursa-jwt-lacerta-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef56c704920dd44671d3c0efe77e25cf3249240f4fe7d77f265fe02e8a816a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120853

Malicious code in ursa-spawn-writable-acamar npm...

EUVD-2025-121641

Malicious code in start-ursa-nodejs-server npm...

EUVD-2025-120876

Malicious code in ursa-cypress-perseus-spinner npm...

EUVD-2025-123505

Malicious code in postcss-magellan-ursa-zenobia npm...

EUVD-2025-124292

Malicious code in non-blocking-ursa-postgres-cygnus npm...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114045

Malicious code in enif-ursa-chakra-ui-axios npm...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120263

Malicious code in xenon-ursa-semantic-ui-firebase npm...

EUVD-2025-121668

Malicious code in standard-promise-rigel-ursa npm...

EUVD-2025-120882

Malicious code in ursa-centaurus-writable-jupiter npm...

Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...