CVE-2026-5559 AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

EUVD-2025-177702

Malicious code in native-galaxy-antares-global npm...

Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180424

Malicious code in antares-cluster-ursa-javascript npm...

Malicious code in antares-apex-robotics-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05283e2ac79402a444e34dc483cb2ef0709b9639a2149ee025d60b9d9c920581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177899

Malicious code in mensa-subscription-antares-csv npm...

EUVD-2025-179497

Malicious code in cross-env-package-rimraf-antares npm...

EUVD-2025-177745

Malicious code in mui-cluster-antares-nucleosynthesis npm...

EUVD-2025-175579

Malicious code in websockets-thuban-antares-yakutsk npm...

EUVD-2025-179516

Malicious code in cressida-cache-iota-antares npm...

EUVD-2025-178582

Malicious code in heka-antares-vulcan-commitizen npm...

EUVD-2025-180414

Malicious code in antares-quasarjet-winston-superflare npm...

Malicious code in nodemon-europa-antares-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2621a646e147379df674c0d63c5f4ebb619019eff456c52c35fb9e6f4f8f4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179541

Malicious code in cosmicweb-antares-lithosphere-phoenix npm...

EUVD-2025-175925

Malicious code in toml-slidev-nebula-antares npm...

EUVD-2025-177106

Malicious code in polaris-stop-sails-antares npm...

EUVD-2025-180418

Malicious code in antares-mui-tailwindcss-cross-env npm...

EUVD-2025-176278

Malicious code in spawn-nova-antares-sync npm...

Malicious code in joviology-exobiology-antares-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a983ca5a53cd062c2f7e73f4666acb407c180f401b30966fb51f59b1a69a552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...