449 matches found
Malicious Package
Overview cygnus-testcafe-triton-proxima is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious Package
Overview bellatrix-proxima-xenos-mantle is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious Package
Overview jekyll-proxima-titan-phoenix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
GitHub: OAuth redirect uri validation bypass for :proxima_first_party_sync apps
A vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. The vulnerability was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. The vulnerability was reported through the GitHub Bug Bounty program...
Malicious code in docusaurus-xml-proxima-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4841cb7fbba4912212b6867a9ab9667021ec18b4781ff0fe00923b7377062a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in proxima-hugo-pm2-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb17e16f79c8aed56179cb32c277f170ac4625f582251cd9e83a240a0d374c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in robotics-proxima-thuban-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c49c583566ab4a988020e91856a8424efde07c79821afab4121ca10ecb8ed77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subscription-proxima-levels-phenomic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae0a4d1da9dccbfd49a0d5afe640d0eb483fd0d87be0ffb321142c0dec91f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176248
Malicious code in spinner-proxima-cybernetics-cosmochemistry npm...
EUVD-2025-176194
Malicious code in stream-andromeda-proxima-loglevel npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
EUVD-2025-175814
Malicious code in unuk-chalk-proxima-test npm...
EUVD-2025-175716
Malicious code in virgo-joviology-proxima-install npm...
EUVD-2025-177738
Malicious code in mui-xerxes-proxima-cassini npm...
EUVD-2025-177046
Malicious code in private-sadr-proxima-private npm...
EUVD-2025-176969
Malicious code in proxima-antimatter-express-redis npm...
EUVD-2025-176963
Malicious code in proxima-farout-react-bootstrap-puppeteer npm...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...