455 matches found
EUVD-2025-114548
Malicious code in deneb-ursa-karma-javascript npm...
EUVD-2025-124427
Malicious code in nightwatch-ursa-triton-frontend npm...
EUVD-2025-120849
Malicious code in ursa-winston-slides-neptune npm...
EUVD-2025-122553
Malicious code in rest-ursa-chalk-rimraf npm...
EUVD-2025-111248
Malicious code in mensa-typeorm-node-sass-ursa npm...
Malicious code in io-frontend-jasmine-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in octans-antares-ursa-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-loopback-start-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b25c5a49bd65dbc94fc59c560e21bfdcc8bd4f0963dc090dff5f430428d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120848
Malicious code in ursa-xerxes-betelgeuse-semantic-ui npm...
EUVD-2025-121992
Malicious code in shelljs-ursa-fornax-luna npm...
EUVD-2025-123378
Malicious code in private-ursa-terser-capella npm...
MAL-2025-145141 Malicious code in mongodb-spawn-ursa-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147185 Malicious code in rehype-socketio-arcturus-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517b206758d062405fc1f5a4cb182194e74d2f115f80f5bea7031a861c4a0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149072 Malicious code in ursa-rocket-postcss-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139190 Malicious code in acamar-vuepress-ursa-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f4ec718925e3509cfff8579ddfc34ac0e0bb9a3052dc2648a9e233c27deb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149041 Malicious code in ursa-apollo-version-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eb449d68a1a78b9ec331359f8f01997194d27f618af0a73724e5259164277c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...