EUVD-2025-115141

Malicious code in commitlint-config-angular-kronos-nebula-socketio npm...

EUVD-2025-123761

Malicious code in phoebe-mensa-nebula-unuk npm...

EUVD-2025-111770

Malicious code in less-protractor-nebula-figures npm...

EUVD-2025-115592

Malicious code in celeste-nebula-less-loader-build npm...

EUVD-2025-116745

Malicious code in altair-nebula-vulcan-indus npm...

EUVD-2025-122717

Malicious code in relay-nebula-redis-nightmare npm...

Malicious code in nebula-electron-perseus-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b734dc842f23482e428352f82b5484e7d8a438f991e4dfad21d847ca8ed5262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-library-nebula-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51633b5eb10d91cac3ec86fe2365ae8450373b723b5074e954f4a5c87df7bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112456

Malicious code in inquirer-redis-nebula-public npm...

EUVD-2025-116189

Malicious code in barnard-nebula-altair-gulp npm...

EUVD-2025-113299

Malicious code in ganymede-nebula-playwright-nodemon npm...

EUVD-2025-124000

Malicious code in package-antares-selenium-nebula npm...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

MAL-2025-148119 Malicious code in spectron-nebula-sedna-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15222907a3541c99e3333a416d00c79fd9e069b48d57696a608a596c0d244a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122736

Malicious code in rehype-solis-nebula-rehype npm...

SUSE CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

GO-2025-4068 Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula

Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula...

CVE-2025-62820

A flaw was found in Slack Nebula. An improper CIDR construction in the hostmap logic makes the inbound firewall overly permissive for nodes with certificates allowing subnets or multiple IPs. An attacker controlling such a node can send packets with arbitrary source IP addresses within the networ...

Slack Nebula may accept arbitrary source IP addresses

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...