com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.8.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.4.1) +13 more potentially affected by CVE-2026-116803 via org.webjars.npm:dompurify (>=3.1.7, <=3.4.15)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.57.0 Source cves: CVE-2026-116803 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-21755402...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.8.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.4.1) +13 more potentially affected by CVE-2026-116802 via org.webjars.npm:dompurify (>=3.1.7, <=3.4.15)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.57.0 Source cves: CVE-2026-116802 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-21755404...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.8.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.4.1) +13 more potentially affected by unknown CVE via org.webjars.npm:dompurify (>=3.1.7, <=3.4.15)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.57.0 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-21460658...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.8.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.4.1) +13 more potentially affected by unknown CVE via org.webjars.npm:dompurify (>=3.1.7, <=3.4.15)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.57.0 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-21460656...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.8.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.4.1) +13 more potentially affected by CVE-2026-109345 via org.webjars.npm:dompurify (>=3.1.7, <=3.4.15)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.57.0 Source cves: CVE-2026-109345 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20536985...

com.codbex.atlas:codbex-atlas-application (>=2.77.0, <=2.79.0), com.codbex.gaia:codbex-gaia-application (>=2.68.0, <=2.70.0) +19 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.1)

net.snowflake:snowflake-jdbc MAVEN version 3.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.77.0, =2.68.0, =2.60.0, =2.65.0, =2.59.0, =2.61.0, =3.21....

Malicious code in link-sadr-helios-pulsar (npm)

Source: amazon-inspector b26e562ea8107d28edfaaf8d5a3dd188d46f23693a0daaa8dd5f8785b7ac4cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-loader-despina-helios-websockets (npm)

Source: amazon-inspector eb2d2daad2939daddb6094ecd8b042f6c1deed1df9ac48ecabdec6aed6541702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-geckodriver-miranda-helios (npm)

Source: amazon-inspector c8da58ae7c50c1930c3d3ef07a38ddcede94d7c551375a995dfa0330adc72257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kuiperbelt-nova-parsec-helios (npm)

Source: amazon-inspector c5005685248afcbff87afc6c58f65d21755259f517acd39c3c946f53539dcf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kronos-grus-scripts-helios (npm)

Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in json-superagent-helios-ablation (npm)

Source: amazon-inspector 900574b26fd4ba0c7e2520afb21ebd17480042fc0deb1268745bab58e58e77bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ichnology-helios-grus-vuetify (npm)

The package ichnology-helios-grus-vuetify was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in husky-helios-wezen-nextjs (npm)

Source: amazon-inspector 17649c319fbcd9560753b90dabe7181f60522771c2b424dd6054ff810384f2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helios-xml-restart-dorado (npm)

Source: amazon-inspector 2d63dc75a03aa2141802b7321311b220cc5902d8579b24371b901d0696be92c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helios-procyon-acamar-andromeda (npm)

Source: amazon-inspector 8b1c78fe3d841cbc1ffd9d974980201998e5adecf1b4254977630cd35006ef5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helios-coronalmassejection-carina-crust (npm)

The package helios-coronalmassejection-carina-crust was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in helios-nightwatch-tethys-eridanus (npm)

Source: amazon-inspector 89ab19a67d9571b4928642ad52ea4d92a1394cb76bd2b6e7484639bb37cf0aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helios-magellan-server-helmet (npm)

The package helios-magellan-server-helmet was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in helios-impulse-meteor-fomalhaut (npm)

Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...