665 matches found
Sirius
Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f docker-compose.installer.yaml run --r...
Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices
Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices By Shashikala Piddannavar, Raymond Joseph Alfonso and Sagar Bade · October 26, 2026 Introduction During a recent priority customer escalation, our “Trellix” Threat Response Team investigated a suspicious alert...
Sirius Computer Crux Agent improper exception handling vulnerability
Versions 1.9.0 through 2.0.3 of Sirius Computer Crux Agent contain a security vulnerability. This vulnerability arises from using the full SKA dual-position key as a WireGuard pre-shared key without verifying its length. When negotiating a peer-to-peer session using SHA-512, the resulting key...
Malicious code in lint-yaml-sirius-soap (npm)
Source: amazon-inspector 69f697afb55745f73d83f2c2e7a513631930d27a425ade00cad76a2abd531734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lint-staged-deimos-alphard-sirius (npm)
Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lint-staged-sirius-xo-juno (npm)
Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in less-loader-sirius-perseus-loglevel (npm)
Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in leda-sirius-ultra-pegasus (npm)
Source: amazon-inspector 1615c16c9e22f037204875a7e2ea2e865b2b9ab7582cf0c51d171127d3b7a370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in leda-nodejs-nextjs-sirius (npm)
Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview leda-nodejs-nextjs-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in kronos-sirius-process-koa (npm)
Source: amazon-inspector 1edc19892781e5698a861cfdaaf9cb484c281578a45fd8758876ddff8f2f484d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in koa-kaus-sirius-draco (npm)
Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in kaus-bootes-quark-sirius (npm)
The package kaus-bootes-quark-sirius was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in karma-dependencies-geckodriver-sirius (npm)
Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jwt-pm2-sirius-dione (npm)
Source: amazon-inspector 6ecfb2565bc45db26c95bc5b56093e599e6063f6d689c623a3d25d40a4f29dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in juno-sirius-react-bootstrap-weywot (npm)
Source: amazon-inspector 1187ba054fc9b46477a91275100c1ebc2b34469d8a5e8314d2cfb9fe05d71488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in json-sirius-enceladus-scorpius (npm)
Source: amazon-inspector 945d4f08ea57fdbd5f111d8fbcefba2ee9998e0a3f090e21803b69c383f96f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)
Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jasmine-metalsmith-schema-sirius (npm)
Source: amazon-inspector a67d95657794543c0c975eb63112589e29b6bcfdff3feed460227a8b21843de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...