459 matches found
EUVD-2025-115287
Malicious code in cluster-callisto-ursa-standard npm...
EUVD-2025-120864
Malicious code in ursa-oberon-antares-warp npm...
EUVD-2025-113100
Malicious code in graphql-virgo-prettier-ursa npm...
EUVD-2025-116794
Malicious code in algol-sagitta-nodejs-ursa npm...
EUVD-2025-122613
Malicious code in request-repository-meissa-ursa npm...
EUVD-2025-114157
Malicious code in elektra-tethys-perseus-ursa npm...
EUVD-2025-114472
Malicious code in development-ursa-upgrade-kaus npm...
EUVD-2025-120872
Malicious code in ursa-hapi-nextjs-epimetheus npm...
EUVD-2025-123504
Malicious code in postcss-neptune-ursa-nextjs npm...
EUVD-2025-123064
Malicious code in puppeteer-pino-ursa-request npm...
EUVD-2025-124470
Malicious code in nightmare-ursa-non-blocking-subscription npm...
Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-rocket-postcss-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cae97ac55a7b319cca4e3372d42af7f11f5411dab6a8c8a51d5898dec63432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124777
Malicious code in mongodb-spawn-ursa-jasmine npm...
Malicious code in chalk-ursa-leda-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...