Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/02 9:23 p.m.•10 views

Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•15 views

Malicious Package

Overview bellatrix-nextjs-jupiter-dagda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.5AI score
SaveExploits0References2
Rows per page
Query Builder