Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145340 Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148119 Malicious code in spectron-nebula-sedna-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15222907a3541c99e3333a416d00c79fd9e069b48d57696a608a596c0d244a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145344 Malicious code in nebula-hyperion-chromedriver-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f0cb38df1a8181ec17f4e0a0c4f4e5d50074dc19faf9a14da0603b416ba956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143194 Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145440 Malicious code in nightmare-nebula-axios-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2597649307233fc7e02c398dd6aa688e4964b170be8ec32aeaf0852589d735e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113338

Malicious code in gacrux-nightwatch-nebula-graphql npm...

Malicious code in kastra-nebula-markdown-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab07ccf257e2bc8fb5c614300e4c4e456be899800ab9971efec8702b1c11cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124575

Malicious code in nebula-janus-parcel-pino npm...

MAL-2025-142746 Malicious code in fusion-restart-koa-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1780b515b5dd9b790fad828a8f9fa7156196bc7166d320a62ce6341d0f4169ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145348 Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123761

Malicious code in phoebe-mensa-nebula-unuk npm...

MAL-2025-139642 Malicious code in atlas-changelog-nebula-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e2eb2f1733d25f25813a2bb01c686f23d859768bb8ec96a69b2309152b774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115288

Malicious code in cluster-axios-mongodb-nebula npm...

MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142813 Malicious code in ganymede-nebula-playwright-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1f1c5a4a1c55419ec29857d1e30fa3543b82900639e451034c7637c80e6af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

GO-2025-4068 Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula

Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula...

CVE-2025-62820

A flaw was found in Slack Nebula. An improper CIDR construction in the hostmap logic makes the inbound firewall overly permissive for nodes with certificates allowing subnets or multiple IPs. An attacker controlling such a node can send packets with arbitrary source IP addresses within the networ...

Slack Nebula may accept arbitrary source IP addresses

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...