Malicious Package

Overview lint-staged-xanadu-aldebaran-subscription is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

ServiceNow Platform Unauthenticated Blind SQL Injection (CVE-2024-8924)

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Xanadu, Washington DC, and earlier Now Platform releases. This vulnerability could potentially enable an unauthenticated user to acquire unauthorized data stored within the Now Platform. Note that Nessus has n...

EUVD-2025-175525

Malicious code in xanadu-proxima-transport-hermes npm...

EUVD-2025-178737

Malicious code in genomics-biohacking-xanadu-cross-env npm...

EUVD-2025-175674

Malicious code in vuetify-xanadu-stratigraphy-sedimentology npm...

MAL-2025-187137 Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef8b0e335c02e9e3202c8e0195d3bfd55501baef7ef0af424b6b5b8eb2310c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175528

Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...

Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccd63704a8837ed8bae59ef565a17f740167e4fc9a2bbf7f4164bc2321af13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180268

Malicious code in async-gridsome-xanadu-webdriver-mocha npm...

EUVD-2025-178669

Malicious code in graviton-module-stratigraphy-xanadu npm...

EUVD-2025-179426

Malicious code in cz-conventional-changelog-selenium-xanadu-enif npm...

EUVD-2025-178001

Malicious code in luna-xanadu-aquarius-barnard npm...

EUVD-2025-177825

Malicious code in mira-flare-xanadu-pavo npm...

EUVD-2025-177818

Malicious code in miranda-biotechnology-xanadu-halley npm...

EUVD-2025-176716

Malicious code in relay-xanadu-playwright-miranda npm...

MAL-2025-187881 Malicious code in luna-xanadu-aquarius-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc41d7b808faaf60c42dff26f6f47331e3bd6a23a51389d3ae2a88c7c0f9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187213 Malicious code in graviton-module-stratigraphy-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284cd425aae5265639cff05fca5137193ecd4c565a2c96c23cffe44143931462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175527

Malicious code in xanadu-ganymede-thuban-polaris npm...

EUVD-2025-175524

Malicious code in xanadu-singularitarianism-fetch-fermion npm...

MAL-2025-187145 Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...