489 matches found
Malicious Package
Overview cygnus-cache-magellan-run-script is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Malicious Package
Overview dactyl-cygnus-carpo-magellan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview algol-magellan-framework-public is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...
Malicious Package
Overview hermes-callback-equinox-magellan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-6357 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-3219 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-1703 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2025-8869 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-8643 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-8643 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-3219 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...
magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-1703 via pip (6.1.1)
pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-1703 Source advisory: OSV:GHSA-6VGW-5PG2-W6JP...
EUVD-2025-175466
Malicious code in xo-nightmare-magellan-eslint-plugin npm...
EUVD-2025-180343
Malicious code in arcturus-magellan-bellatrix-quasarjet npm...
EUVD-2025-178241
Malicious code in jupiter-fork-axios-magellan npm...
EUVD-2025-177986
Malicious code in magellan-astro-webdriverio-enceladus npm...
Malicious code in testcafe-chalk-magellan-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...