183 matches found
apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2026-106454 via twisted (23.8.0)
twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...
Malicious code in accessible-apricot-mollusk (npm)
Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2024-41671 via twisted (23.8.0)
twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...
apricot-server (>=0.0.6, <=0.1.1), atxm (>=0.2.0, <=0.2.1) +19 more potentially affected by CVE-2026-42304 via twisted (23.10.0)
twisted PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.6, =0.2.0, =3.10.1, =1.0.0, =23.11.0, =0.1.0, =1.1.0, =3.0.0, =4.2.0, =0.11.0, =7.1.1, =0.8.2, =0.9.0 - smpp-twisted3 0.8.0...
apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2026-42304 via twisted (23.8.0)
twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...
apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2026-42304 via twisted (23.8.0)
twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G4...
EUVD-2025-117418
Malicious code in electric-apricot-dormouse npm...
EUVD-2025-117373
Malicious code in foreign-apricot-cockroach npm...
EUVD-2025-117299
Malicious code in inland-apricot-puma npm...
MAL-2025-138923 Malicious code in pale-apricot-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b6ebad71ccf926a9e0942bf3cd1f3adc3cd8e41785fba5e2cbf2fb9a1956e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138803 Malicious code in inland-apricot-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in inland-apricot-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117442
Malicious code in disabled-apricot-dragon npm...
EUVD-2025-117259
Malicious code in lonely-apricot-hare npm...
Malicious code in foreign-apricot-cockroach (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sheer-apricot-cardinal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c223e8b64edca33cca40bf70ced987c14eb549322d8a5fc3e01d44c5eff6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electric-apricot-dormouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e47e60b620642bcc95c5ac6199138001d0a1597bc928c020921b208827d026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117098
Malicious code in sheer-apricot-cardinal npm...