EUVD-2025-175763

Malicious code in ursa-neptune-private-scripts npm...

EUVD-2025-175765

Malicious code in ursa-lynx-baryon-ophiuchus npm...

MAL-2025-187945 Malicious code in materialize-pegasus-typeorm-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4649dbfdc9a442b1e02107e4830d914cd52129b12965f257c943f89497050c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112417

Malicious code in io-frontend-jasmine-ursa npm...

EUVD-2025-123504

Malicious code in postcss-neptune-ursa-nextjs npm...

EUVD-2025-120866

Malicious code in ursa-meteor-hydra-oberon npm...

EUVD-2025-120887

Malicious code in ursa-apollo-xenon-europa npm...

EUVD-2025-124423

Malicious code in nightwatch-webdriverio-ursa-umbriel npm...

EUVD-2025-111814

Malicious code in leda-ursa-ganymede-arcturus npm...

EUVD-2025-124218

Malicious code in nuxtjs-draco-jekyll-ursa npm...

Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122859

Malicious code in react-bootstrap-lint-alphard-ursa npm...

EUVD-2025-120854

Malicious code in ursa-shelljs-buffer-rimraf npm...

EUVD-2025-116503

Malicious code in ariel-ursa-nodemon-rate-limiter npm...

EUVD-2025-122816

Malicious code in redis-javascript-ursa-polaris npm...

EUVD-2025-120872

Malicious code in ursa-hapi-nextjs-epimetheus npm...

EUVD-2025-115091

Malicious code in concurrently-ursa-betelgeuse-betelgeuse npm...

EUVD-2025-114472

Malicious code in development-ursa-upgrade-kaus npm...

EUVD-2025-123064

Malicious code in puppeteer-pino-ursa-request npm...

Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...