Malicious code in centauri-eris-leda-remark (npm)

The package centauri-eris-leda-remark was found to contain malicious code...

Malicious code in centauri-magnetosphere-virgo-pipe (npm)

The package centauri-magnetosphere-virgo-pipe was found to contain malicious code...

Malicious code in epigenetics-centauri-lacerta-primatology (npm)

The package epigenetics-centauri-lacerta-primatology was found to contain malicious code...

Malicious code in umbriel-centauri-electron-builder-avior (npm)

The package umbriel-centauri-electron-builder-avior was found to contain malicious code...

Malicious code in troposphere-pegasus-centauri-supervisor (npm)

The package troposphere-pegasus-centauri-supervisor was found to contain malicious code...

Malicious code in centauri-hydra-node-config-avior (npm)

The package centauri-hydra-node-config-avior was found to contain malicious code...

Malicious code in hyperion-buffer-centauri-express (npm)

The package hyperion-buffer-centauri-express was found to contain malicious code...

Malicious code in centauri-pegasus-eslint-config-commitlint (npm)

The package centauri-pegasus-eslint-config-commitlint was found to contain malicious code...

Malicious code in centauri-nebula-steganography-meteor (npm)

The package centauri-nebula-steganography-meteor was found to contain malicious code...

MAL-2025-16717 Malicious code in centauri-nebula-steganography-meteor (npm)

The package centauri-nebula-steganography-meteor was found to contain malicious code...

MAL-2025-37228 Malicious code in troposphere-pegasus-centauri-supervisor (npm)

The package troposphere-pegasus-centauri-supervisor was found to contain malicious code...

MAL-2025-22853 Malicious code in hyperion-buffer-centauri-express (npm)

The package hyperion-buffer-centauri-express was found to contain malicious code...

MAL-2025-27406 Malicious code in nextjs-nconf-centauri-middleware (npm)

The package nextjs-nconf-centauri-middleware was found to contain malicious code...

MAL-2025-16715 Malicious code in centauri-hydra-node-config-avior (npm)

The package centauri-hydra-node-config-avior was found to contain malicious code...

MAL-2025-14783 Malicious code in archaeogenetics-nova-centauri-tool (npm)

The package archaeogenetics-nova-centauri-tool was found to contain malicious code...

MAL-2025-19707 Malicious code in epigenetics-centauri-lacerta-primatology (npm)

The package epigenetics-centauri-lacerta-primatology was found to contain malicious code...

MAL-2025-16713 Malicious code in centauri-ariel-shelljs-iota (npm)

The package centauri-ariel-shelljs-iota was found to contain malicious code...

MAL-2025-37701 Malicious code in umbriel-centauri-electron-builder-avior (npm)

The package umbriel-centauri-electron-builder-avior was found to contain malicious code...

GHSA-CHCR-X7HC-8FP8 Devise-Two-Factor vulnerable to brute force attacks

Advisory withdrawn The backing CVE has been rejected Devise-Two-Factor does not throttle or otherwise restrict login attempts at the server by default. When combined with the Time-based One Time Password algorithm's TOTP inherent entropy limitations, it's possible for an attacker to bypass the 2F...

Devise-Two-Factor vulnerable to brute force attacks

Devise-Two-Factor does not throttle or otherwise restrict login attempts at the server by default. When combined with the Time-based One Time Password algorithm's TOTP inherent entropy limitations, it's possible for an attacker to bypass the 2FA mechanism through brute-force attacks. Impact If a...