Sirius

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f docker-compose.installer.yaml run --r...

Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices

Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices By Shashikala Piddannavar, Raymond Joseph Alfonso and Sagar Bade · October 26, 2026 Introduction During a recent priority customer escalation, our “Trellix” Threat Response Team investigated a suspicious alert...

Malicious Package

Overview leda-nodejs-nextjs-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Sirius v1.1.0

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start root@kitploit: git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f...

Malicious Package

Overview hermes-xml-auth0-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview hermes-radiant-lint-staged-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

EUVD-2025-176354

Malicious code in sirius-registry-webpack-quasar npm...

EUVD-2025-179882

Malicious code in capella-proxima-geomorphology-sirius npm...

EUVD-2025-177208

Malicious code in phoebe-petrology-sirius-fermiparadox npm...

EUVD-2025-176361

Malicious code in sirius-darkenergy-selenium-stream npm...

EUVD-2025-177503

Malicious code in oauth-zenobia-mechatronics-sirius npm...

EUVD-2025-176362

Malicious code in sirius-blaze-decoherence-scripts npm...

Malicious code in umbra-enif-sirius-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d6e28e0423c02db3969a8742d5aa784afb117a4d8361b30eaf8032885dbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177436

Malicious code in ophiuchus-whitedwarf-sirius-altair npm...

EUVD-2025-180381

Malicious code in apollo-sirius-upgrade-iota npm...

EUVD-2025-175668

Malicious code in vulcan-rimraf-sirius-enceladus npm...

EUVD-2025-179696

Malicious code in cluster-sirius-promise-neutrino npm...

EUVD-2025-180069

Malicious code in biohacking-axios-pegasus-sirius npm...

EUVD-2025-175997

Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus npm...

MAL-2025-187216 Malicious code in gravity-juno-cors-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8097a0705bf1ad76bb1607942f6aa70d99247cce4d60a546977d03b5d6d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...