MAL-2025-32063 Malicious code in remark-chakra-ui-neptune-parsec (npm)

The package remark-chakra-ui-neptune-parsec was found to contain malicious code...

MAL-2025-27283 Malicious code in neptune-config-grunt-darkenergy (npm)

The package neptune-config-grunt-darkenergy was found to contain malicious code...

MAL-2025-27286 Malicious code in neptune-iota-bioinformatics-technosignature (npm)

The package neptune-iota-bioinformatics-technosignature was found to contain malicious code...

MAL-2025-27287 Malicious code in neptune-lyra-cosmochemistry-markdownlint (npm)

The package neptune-lyra-cosmochemistry-markdownlint was found to contain malicious code...

MAL-2025-14969 Malicious code in astro-neptune-ariel-antimatter (npm)

The package astro-neptune-ariel-antimatter was found to contain malicious code...

Malicious code in multiverse-xo-hadron-neptune (npm)

The package multiverse-xo-hadron-neptune was found to contain malicious code...

MAL-2025-21887 Malicious code in graphql-neptune-reveal-md-leda (npm)

The package graphql-neptune-reveal-md-leda was found to contain malicious code...

MAL-2025-6557 Malicious code in neptune-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in neptune-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Neptune RAT Variant Spreads via YouTube to Steal Windows Passwords

A new Neptune RAT variant is being shared via YouTube and Telegram, targeting Windows users to steal passwords and deliver additional malware components...

AWS VDP: Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The non-production API endpoints for the Neptune Graph Service were found to fail logging to CloudTrail, resulting in silent permission enumeration. Specifically, seven non-production endpoints were identified that could be used with standard IAM credentials without generating CloudTrail logs. Th...

neptunebyglobalvillage.ie Improper Access Control vulnerability OBB-3833929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

Directory traversal

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

neptuneyachtsales.com Cross Site Scripting vulnerability OBB-2354473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Neptune Exploit Kit Dropping Cryptocurrency Miners Through Malvertisements

Despite a marked decrease in activity, exploit kits haven’t completely disappeared just yet. The Neptune, or Terror Exploit Kit, is alive and well; during the last month, researchers have observed the kit as part of a campaign to abuse a legitimate popup ad service to drop cryptocurrency miners...

Hiking Club Malvertisements Drop Monero Miners Via Neptune Exploit Kit

Exploit kit EK activity has been on the decline ever since Angler Exploit Kit was shut down in 2016. Fewer people using Internet Explorer and a drop in browser support for Adobe Flash – two primary targets of many exploit kits – have also contributed to this decline. Additionally, some popular...

Hiking Club Malvertisements Drop Monero Miners Via Neptune Exploit Kit

Exploit kit EK activity has been on the decline ever since Angler Exploit Kit was shut down in 2016. Fewer people using Internet Explorer and a drop in browser support for Adobe Flash – two primary targets of many exploit kits – have also contributed to this decline. Additionally, some popular...

Hiking Club Malvertisements Drop Monero Miners Via Neptune Exploit Kit

Exploit kit EK activity has been on the decline ever since Angler Exploit Kit was shut down in 2016. Fewer people using Internet Explorer and a drop in browser support for Adobe Flash – two primary targets of many exploit kits – have also contributed to this decline. Additionally, some popular...