185 matches found
Malicious code in asteroid-everglow-kpe343-project (npm)
The package asteroid-everglow-kpe343-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in asteroid-everest-dok969-project (npm)
The package asteroid-everest-dok969-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in asteroid-bamboo-gxv109-project (npm)
The package asteroid-bamboo-gxv109-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in asteroid-cors-bulma-paleoclimatology (npm)
Source: amazon-inspector c757cc0677aa2f8229baf844fe4422f081113cf652d25c7447e2ed6db0fcfb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in asteroid-alpha-ad0m (npm)
The package asteroid-alpha-ad0m was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in asteroid-gacrux-husky-slides (npm)
The package asteroid-gacrux-husky-slides was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in antares-asteroid-quantum-helmet (npm)
Source: amazon-inspector 06b7c61d916fabec1f02468b65e006f419ee4361732312623ac970b55b57cdc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2026-58659 via pytorch-lightning (0.6.0)
pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...
asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2026-31221 via pytorch-lightning (0.6.0)
pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...
asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.7.6)
pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...
asteroid (>=0.3.5, <=0.4.0), coreml (>=0.0.10, <=0.0.15) +8 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.9.0)
pytorch-lightning PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.5, =0.0.10, =0.0.1, =0.0.2.post1, =1.0.0a4, =0.4.1, =0.2.1, =0.13.6, =0.1.0, =0.1.1 - torch-factorization-models...
asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-8020 via pytorch-lightning (0.6.0)
pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...
asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-8019 via pytorch-lightning (0.6.0)
pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-507...
asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.6)
pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-507...
asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2026-31221 via pytorch-lightning (0.6.0)
pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...
EUVD-2025-179184
Malicious code in electron-builder-csv-npm-asteroid npm...
EUVD-2025-179951
Malicious code in build-perseus-repository-asteroid npm...
EUVD-2025-177632
Malicious code in neutronstar-hologram-volcanology-asteroid npm...