Malicious Package

Overview lint-jabbah-elektra-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2024-41961

Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack Services. A code injection vulnerability was found in the live search functionality of the Ruby on Rails based Elektra web application. An authenticated user can craft a search term containing Ruby code, which...

EUVD-2025-179399

Malicious code in darkenergy-regulus-hadron-elektra npm...

EUVD-2025-179172

Malicious code in elektra-xml-grus-hugo npm...

EUVD-2025-177813

Malicious code in miranda-elektra-quark-ophiuchus npm...

Malicious code in test-umbra-elektra-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c07c4a11aad899f56c47c7827672845788d476dc8632cfa2e8e99790f69a765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-zenobia-elektra-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b0b6d51fb6f3b2c4e9271da9ef0418e408f6a5005898849822bfbf56f5b85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178871

Malicious code in forever-heka-polaris-elektra npm...

EUVD-2025-177386

Malicious code in package-zenobia-elektra-geodynamo npm...

Malicious code in graphql-elektra-triton-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32d98eba6cf6a31eff8d8c5f67b0544f7ea9333a54ebdc237767280fcbcf553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188496 Malicious code in package-zenobia-elektra-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b0b6d51fb6f3b2c4e9271da9ef0418e408f6a5005898849822bfbf56f5b85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178678

Malicious code in graphql-elektra-triton-transform npm...

EUVD-2025-180459

Malicious code in algol-elektra-rollup-style-loader npm...

EUVD-2025-178620

Malicious code in halley-andromeda-elektra-supernova npm...

EUVD-2025-179071

Malicious code in eridanus-paleoceanography-blitz-elektra npm...

EUVD-2025-180443

Malicious code in alphard-webdriverio-titan-elektra npm...

EUVD-2025-176891

Malicious code in puppeteer-rocket-bioinformatics-elektra npm...

MAL-2025-186483 Malicious code in darkenergy-regulus-hadron-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48abc3ca0de5a812ede9f76d554a626b0ecb0540492b00f8507556b2a26cdd30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-elektra-rollup-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185908 Malicious code in brane-mocha-elektra-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64e4699bbd0a9043d4f0a6fe6c81a12163af437814fa8d1de4cf1f028f65136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...