Dark-Moon

DarkMoon Open-source autonomous AI penetration testing — finds, exploits and qualifies every vulnerability on your own infrastructure ⭐ Star DarkMoon · 🚀 Quick Start · 🧩 Integrations · 📊 Benchmark · 🔒 Darkmoon Pro · ▶️ Install & Run OSS · ▶️ Demo Pro DarkMoon is autonomous AI penetration testing...

Malicious code in lagoon-moon-hmy577-project (npm)

The package lagoon-moon-hmy577-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in icicle-moon-zdu476-project (npm)

The package icicle-moon-zdu476-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hot-float-moon-unix-fork (npm)

Source: amazon-inspector bbc7cfe0783332584e55e88a0d036771aba6155e5b13fad52b4a4dbaf2311663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in glade-moon-agg795-project (npm)

The package glade-moon-agg795-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in evergreen-moon-bgo009-project (npm)

The package evergreen-moon-bgo009-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in encrypt-link-alert-grep-moon (npm)

Source: amazon-inspector 3e237a747a38d097627400db5dc22011d345ce71138e2e54d60ee04ba6a1a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Dark-Moon v1.4.0

DarkMoon Open-source autonomous AI penetration testing — finds, exploits and qualifies every vulnerability on your own infrastructure ⭐ Star DarkMoon · 🚀 Quick Start · 🧩 Integrations · 📊 Benchmark · 🔒 Darkmoon Pro · ▶️ Install & Run OSS · ▶️ Demo Pro DarkMoon is autonomous AI penetration testing...

Malicious code in double-file-encode-moon-virtualize (npm)

Source: amazon-inspector f10f8c7b46a34fb8cd76f802a955287a6e735d17496a721553248f24725219d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dog-process-file-file-moon (npm)

Source: amazon-inspector e4e1459e69ec028b22bba506edaaede14ac3a45a1b48d29ce754a8be9f0a3522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in deploy-validate-execute-moon-protected (npm)

The package deploy-validate-execute-moon-protected was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in decrypt-xml-compress-moon-file (npm)

Source: amazon-inspector cd29dfb05cee6c5ddaf5d6fc7511c903cc2572f128025c139bb45606c8a4d1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cloud-water-old-moon-wind (npm)

Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cascade-moon-ufv550-project (npm)

The package cascade-moon-ufv550-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in authenticate-enum-report-query-moon (npm)

The package authenticate-enum-report-query-moon was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in air-cron-moon-compress-hash (npm)

The package air-cron-moon-compress-hash was found to contain malicious code. --- Credit: OpenSSF source...

Dark-Moon v1.3.1

The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...

Malicious code in @love-moon/conductor-cli (npm)

Source: amazon-inspector 7ea5d4f1af0a0b67e6f74bfb45867ce0b33136083138e3c23a56df03d8b5c902 The conductor daemon command bin/conductor-daemon.js - src/daemon.js opens a WebSocket to https://conductor.conductor-ai.top or a user-configured backendurl and registers a message handler that, in...

Dark-Moon agents-expansion-2026.08

The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...

Malicious code in black-moon-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c672e4ab8770773551a9ff9b6b95a5740894bd1c689154056f69e5da4fdb879 The package black-moon-js was found to contain malicious code. Source: ossf-package-analysis...