Malicious code in less-xml-asteroid-cryonics (npm)

The package less-xml-asteroid-cryonics was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm)

Source: amazon-inspector bb9ecc1569f3eb6c25f454d0d132e550cf8451e776e85bf56a54a04955aaab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in iris-asteroid-mcb936-project (npm)

The package iris-asteroid-mcb936-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in inflation-nova-asteroid-hermes (npm)

The package inflation-nova-asteroid-hermes was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hollow-asteroid-svq681-project (npm)

The package hollow-asteroid-svq681-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in helios-epigenetics-asteroid-eclipse (npm)

Source: amazon-inspector c6377e2b79f3c071d80e2ff88f6a1bc2642ed48e5cb294511d71816003bdd01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heliophysics-gulp-interstellarmedium-asteroid (npm)

The package heliophysics-gulp-interstellarmedium-asteroid was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm)

The package gridsome-orogeny-prettier-plugin-markdown-asteroid was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in grape-asteroid-krt5 (npm)

The package grape-asteroid-krt5 was found to contain malicious code. --- Credit: OpenSSF source...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-5452 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-5980 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-5452 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-5980 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

Malicious code in everglow-asteroid-aht158-project (npm)

The package everglow-asteroid-aht158-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in electron-builder-csv-npm-asteroid (npm)

Source: amazon-inspector bf1c41f7b478def4f98d67c744bd71324c06f401c2371977bcbd2022b1877a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in elara-magnetar-asteroid-cosmicray (npm)

Source: amazon-inspector c52e755b198c774dd97904304558c2b73ba5f1ae10822199222a1172fa1840d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dolphin-asteroid-lhf553-project (npm)

The package dolphin-asteroid-lhf553-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in despina-luna-asteroid-accretion (npm)

The package despina-luna-asteroid-accretion was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in despina-cluster-asteroid-wormhole (npm)

Source: amazon-inspector f439fbc8184c33b4d3fcb4697058f662ff06229dcae196ce2b304f9a2e7d22cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in despina-jekyll-asteroid-cz-conventional-changelog (npm)

The package despina-jekyll-asteroid-cz-conventional-changelog was found to contain malicious code. --- Credit: OpenSSF source...