56 matches found
Malicious Package
Overview bellatrix-proxima-xenos-mantle is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
AWS VDP: bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys
A second Bedrock API key-accepting service plane called "bedrock-mantle" was discovered. This plane was not described in AWS's customer-facing Bedrock documentation. As a result, the AWS-published security controls to detect and prevent Bedrock API key abuse failed to apply to the bedrock-mantle...
EUVD-2025-178916
Malicious code in figures-mantle-docusaurus-promise npm...
EUVD-2025-176580
Malicious code in run-script-zenith-mantle-blaze npm...
Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e48a9fd6450f06e90ee5d9956c154c4f2502f33ea2ea4855e7091ec32a7172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176996
Malicious code in prosthetics-leda-mantle-deimos npm...
Malicious code in parallax-chakra-ui-mantle-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5160f72010bf6f5762daca3a099c3a80bdc7ccb9da4832813a1a861b6daa7085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177069
Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo npm...
EUVD-2025-177545
Malicious code in nodemon-terser-webpack-plugin-private-mantle npm...
EUVD-2025-177964
Malicious code in mantle-asteroid-charon-quasar npm...
EUVD-2025-178591
Malicious code in hawkingradiation-eslint-mantle-lyra npm...
Malicious code in sadr-passport-mantle-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbf90790b787c745d7ecc3df9a5bb266126009d229135095e2d81322087b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188879 Malicious code in prosthetics-leda-mantle-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02ccf110939f33fbfa2672f6cba59b7579228e554de159d0d913b20d0526171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177965
Malicious code in mantle-achernar-kinetic-whitedwarf npm...
EUVD-2025-177963
Malicious code in mantle-galaxy-vuetify-pm2 npm...
MAL-2025-188337 Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e48a9fd6450f06e90ee5d9956c154c4f2502f33ea2ea4855e7091ec32a7172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177329
Malicious code in parallax-chakra-ui-mantle-inquirer npm...
EUVD-2025-177962
Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology npm...