Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

Orbit

ＯＲＢＩＴ Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

Orbit-Fox_SSRF_CVE-2025-10874

CVE-2025-10874 - Orbit Fox SSRF Proof of Concept Proof of concept exploit demonstrating Server-Side Request Forgery SSRF vulnerability in the Orbit Fox WordPress plugin with null byte injection bypass. Detailed blog post: https://ryanmroth.com/articles/orbit-fox-ssrf Vulnerability Details Detail|...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +8135 more potentially affected by CVE-2026-114105 via adm-zip (>=0.5.3, <=0.6.0)

adm-zip NPM version =0.5.3, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =1.125.0, =1.0.1, =3.6.0, =1.17.6-next.0, =1.18.4 and more Source cves: CVE-2026-114105 Source advisory: MEND:CVE-2026-114105...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16553 more potentially affected by CVE-2026-114102 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-114102 Source advisory: MEND:CVE-2026-114102...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16553 more potentially affected by CVE-2026-114103 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-114103 Source advisory: SNYK:JS-ADMZIP-20335421...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16553 more potentially affected by CVE-2026-39244 +1 more via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-39244, CVE-2026-92000 Source advisory: OSV:GHSA-RCW4-F5RP-G42V...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16553 more potentially affected by CVE-2026-102282 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-102282 Source advisory: SNYK:JS-ADMZIP-20335419...

-price-checker (>=1.0.0, <=1.0.5), 01_use_npm (1.0.0) +22202 more potentially affected by CVE-2026-101902 via axios (>=0.27.2, <=0.33.0)

axios NPM version =0.27.2, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vector-search 0.1.0 - 0g-vibekit 0.1.0 and more Source cves: CVE-2026-101902 Source advisory: SNYK:JS-AXIOS-20245050...

ORBIT: A Framework for Multi-Agent Safety and Security Evaluations

Multi-agent LLM systems are increasingly deployed for complex, long-horizon tasks or emerge as a natural consequence of agents interacting in the wild. Yet they give rise to significant safety and security risks: the flexible protocols that enable task generalization also expose novel threats, fr...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16553 more potentially affected by CVE-2026-77301 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-77301 Source advisory: OSV:GHSA-7Q85-XJ36-VMFC...

Malicious Package

Overview lint-staged-mutation-orbit-triton is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in lion-orbit-wk7y (npm)

The package lion-orbit-wk7y was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lint-staged-mutation-orbit-triton (npm)

Source: amazon-inspector d3c9aeaa19579be18420287582995f1bdcc81002b80c09f383588846803e280a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lichen-cj6zk-dh8wd-orbit-project (npm)

The package lichen-cj6zk-dh8wd-orbit-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in less-loader-orbit-outercore-graphql (npm)

Source: amazon-inspector f88ea120d028932403ef7118826301f3f3a684d48f6b20f4b3eb9894d104fc25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lacerta-callisto-orbit-umbriel (npm)

Source: amazon-inspector b517427dceb0eb545cc4d3437a5e1f5e1e0a84c52309c6a0f22c3484d4873011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kilo-orbit-0a1b (npm)

The package kilo-orbit-0a1b was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jsonp-pino-orbit-elara (npm)

Source: amazon-inspector be3d643fd5648028f70a716eb1d7569724b28c6a112684f9d1afde022e9ca578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in json-umbriel-orbit-europa (npm)

Source: amazon-inspector 6d3b29923bdd6d0016afad2d219a67c133528e65c02956f723acc4acf4a7e49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...