455 matches found
EUVD-2025-120192
Malicious code in xml-ursa-uglify-js-zenobia npm...
EUVD-2025-120859
Malicious code in ursa-rehype-charon-eslint-plugin npm...
EUVD-2025-120874
Malicious code in ursa-electron-builder-helmet-foundation npm...
EUVD-2025-121930
Malicious code in slides-semantic-release-auth-ursa npm...
EUVD-2025-114350
Malicious code in dotenv-safe-lynx-ursa-restart npm...
EUVD-2025-116014
Malicious code in bootes-postgres-module-ursa npm...
Malicious code in alphard-mongoose-ursa-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113122
Malicious code in got-terser-webpack-plugin-ursa-wolf npm...
EUVD-2025-121656
Malicious code in start-deneb-gacrux-ursa npm...
EUVD-2025-120862
Malicious code in ursa-phoebe-kaus-cosmos npm...
EUVD-2025-121641
Malicious code in start-ursa-nodejs-server npm...
MAL-2025-145141 Malicious code in mongodb-spawn-ursa-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149072 Malicious code in ursa-rocket-postcss-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xenon-ursa-semantic-ui-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116425
Malicious code in auriga-figures-karma-ursa npm...
EUVD-2025-114548
Malicious code in deneb-ursa-karma-javascript npm...
EUVD-2025-124427
Malicious code in nightwatch-ursa-triton-frontend npm...