347 matches found
EUVD-2025-124134
Malicious code in odin-altair-ganymede-xerxes npm...
EUVD-2025-116756
Malicious code in altair-betelgeuse-enceladus-callisto npm...
MAL-2025-139793 Malicious code in await-altair-got-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139356 Malicious code in altair-native-webpack-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6e8418410495e7c4931b3bc647585fd4725d643d2d254e395837c0b1b7288a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148438 Malicious code in tailwindcss-altair-pavo-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86fe2b5c9951a31ac9bf3e5536a7fc468a21cb1dbdcb6e12a8e3f736aede389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139362 Malicious code in altair-radiant-comet-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc2aa8d1279b2b923e8a549372a45c9413fd69d357c13a65d0aede79fe767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111599
Malicious code in loglevel-morgan-quito-altair npm...
MAL-2025-142975 Malicious code in got-aurora-altair-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114218
Malicious code in electron-altair-dependencies-capella npm...
EUVD-2025-114713
Malicious code in cypress-cressida-altair-odin npm...
EUVD-2025-116733
Malicious code in altair-tool-async-passport npm...
Malicious code in altair-mensa-cypress-node-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d753751860507a77cc68b0c83405e74048223a9aad75308e8a43711b12ff1817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146710 Malicious code in proxima-configstore-postgres-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780dcbaec41c4e20250e39de2cf359cc95f8977765f504674d4df2184b60f365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-40760
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes fo...
CVE-2025-40763
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...
CVE-2025-40763
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...
EUVD-2025-106751
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...
