459 matches found
EUVD-2025-120863
Malicious code in ursa-phoebe-capella-changelog npm...
Malicious code in janus-ursa-rimraf-telesto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa8467d781bb8828c170ff1d24643e2fc2541535f36c7baf5fb0ec62b92371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-spawn-writable-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in axios-native-concurrently-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859eb00c4af130b26cb5ce79f6eba7269c3381cfbba2c0655acbeb56b2e3e2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124394
Malicious code in node-sass-auth-ursa-husky npm...
EUVD-2025-120883
Malicious code in ursa-celeste-local-wasat npm...
EUVD-2025-116772
Malicious code in alphard-mongoose-ursa-gridsome npm...
EUVD-2025-112665
Malicious code in hydra-neptune-ursa-jest npm...
Malicious code in ursa-changelog-prompts-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7e4316ad2e5cd206f165f7146db81b01de8cdf3a67430488a7af608beb130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111415
Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig npm...
EUVD-2025-121387
Malicious code in terser-ursa-cosmiconfig-json npm...
EUVD-2025-120870
Malicious code in ursa-juno-nodejs-exec npm...
MAL-2025-143447 Malicious code in hydra-neptune-ursa-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142140 Malicious code in eridanus-apollo-webpack-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b6d3fa2f2b87fcc3aa5e1370bba47b406350a2e793c8bc6d599b8bbd58135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hydra-neptune-ursa-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-draco-jekyll-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4c5bf59cb51cffcb6db9d40e5ca9295d082a2e8f6ab9d0beff342779612cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120790
Malicious code in version-loopback-ursa-charon npm...
Malicious code in gridsome-docusaurus-module-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...