# CyberXYZ package security reports > Public security reports for open-source packages and AI models: every known vulnerability with CVSS, EPSS and the CyberXYZ XYZ score, confirmed malicious packages with their detection signals and remediation, how many packages depend on each one, and which published AI models carry each advisory. Covers npm, PyPI, Maven, Go, NuGet, RubyGems, Packagist and WordPress; AI models are tracked from HuggingFace. Key facts: advisories are ingested continuously from NVD, GitHub Security Advisories, OSV, the MITRE CVE list with CISA Vulnrichment, Microsoft MSRC and Red Hat; the malicious-package corpus has 214,000+ entries; scores are recomputed daily. Published by CyberXYZ Security (https://cyberxyz.io), whose detection methodology was defended as MSc research at Cork Institute of Technology (now MTU). ## How to read a report - [Package report: axios (npm)](https://packages.cyberxyz.io/package/npm/axios): an example with a confirmed-malicious verdict, 44 advisories and a fix callout per advisory. - [Package report: torch (PyPI)](https://packages.cyberxyz.io/package/pypi/torch): an example showing which AI models carry each advisory. - [AI model report: ZhengPeng7/BiRefNet](https://packages.cyberxyz.io/model/ZhengPeng7/BiRefNet): an example of the eight-axis posture and the driving finding. - [Search any package](https://packages.cyberxyz.io/package): no ecosystem needed; the same name on several registries is shown with its registry. ## Scores - CVSS: severity if exploited, 0 to 10, from the advisory publisher. - EPSS: probability of exploitation in the next 30 days, from FIRST, shown with its percentile against all CVEs. - XYZ score: CyberXYZ's 0 to 10 composite of severity, exploitation evidence and ecosystem exposure. ## Recently confirmed malicious - [soraacode (npm)](https://packages.cyberxyz.io/package/npm/soraacode): Install script appeared/grew vs prior version (cross-signal auto) - [tuxcmdfhjkw (npm)](https://packages.cyberxyz.io/package/npm/tuxcmdfhjkw): confirmed malicious - [tibcwmpoeafh (npm)](https://packages.cyberxyz.io/package/npm/tibcwmpoeafh): confirmed malicious - [tib2jcvowuyma (npm)](https://packages.cyberxyz.io/package/npm/tib2jcvowuyma): confirmed malicious - [some-tool-package (npm)](https://packages.cyberxyz.io/package/npm/some-tool-package): confirmed malicious - [solo-async-pipe (npm)](https://packages.cyberxyz.io/package/npm/solo-async-pipe): confirmed malicious - [mob4zchvuine (npm)](https://packages.cyberxyz.io/package/npm/mob4zchvuine): confirmed malicious - [luftzxyuiwgbgsp (npm)](https://packages.cyberxyz.io/package/npm/luftzxyuiwgbgsp): confirmed malicious ## Highest XYZ score by ecosystem - npm: [next](https://packages.cyberxyz.io/package/npm/next) 8.5, [blueimp-file-upload](https://packages.cyberxyz.io/package/npm/blueimp-file-upload) 8.3, [react-server-dom-webpack](https://packages.cyberxyz.io/package/npm/react-server-dom-webpack) 8.2 - pypi: [apache-airflow](https://packages.cyberxyz.io/package/pypi/apache-airflow) 8.4, [Pillow](https://packages.cyberxyz.io/package/pypi/Pillow) 8.4, [ray](https://packages.cyberxyz.io/package/pypi/ray) 8.3 - maven: [apache/activemq](https://packages.cyberxyz.io/package/maven/apache/activemq) 7.8, [apache/struts](https://packages.cyberxyz.io/package/maven/apache/struts) 7.7, [apache/airflow](https://packages.cyberxyz.io/package/maven/apache/airflow) 7.7 - go: [github.com/kubernetes/kubernetes](https://packages.cyberxyz.io/package/go/github.com/kubernetes/kubernetes) 7.3, [gogs.io/gogs](https://packages.cyberxyz.io/package/go/gogs.io/gogs) 7.3, [k8s.io/ingress-nginx](https://packages.cyberxyz.io/package/go/k8s.io/ingress-nginx) 7.3 - nuget: [gogs.io/gogs](https://packages.cyberxyz.io/package/nuget/gogs.io/gogs) 7.3, [DotNetNuke.Core](https://packages.cyberxyz.io/package/nuget/DotNetNuke.Core) 7.2, [org.springframework.data:spring-data-rest-core](https://packages.cyberxyz.io/package/nuget/org.springframework.data%3Aspring-data-rest-core) 7.2 - rubygems: [railties](https://packages.cyberxyz.io/package/rubygems/railties) 7.3 - packagist: [phpmyadmin/phpmyadmin](https://packages.cyberxyz.io/package/packagist/phpmyadmin/phpmyadmin) 7.7, [php/php](https://packages.cyberxyz.io/package/packagist/php/php) 7.7, [phpunit_project/phpunit](https://packages.cyberxyz.io/package/packagist/phpunit_project/phpunit) 7.7 ## AI models whose risk changed recently - [ZhengPeng7/BiRefNet_lite](https://packages.cyberxyz.io/model/ZhengPeng7/BiRefNet_lite): risk level raised - [ZhengPeng7/BiRefNet](https://packages.cyberxyz.io/model/ZhengPeng7/BiRefNet): risk level raised - [biohub/ESMFold2](https://packages.cyberxyz.io/model/biohub/ESMFold2): risk level raised - [MiniMaxAI/MiniMax-H3](https://packages.cyberxyz.io/model/MiniMaxAI/MiniMax-H3): new dependency appeared - [biohub/ESMC-6B](https://packages.cyberxyz.io/model/biohub/ESMC-6B): risk level raised - [biohub/ESMFold2-Fast](https://packages.cyberxyz.io/model/biohub/ESMFold2-Fast): risk level raised ## Longest advisory record - [moodle/moodle (packagist)](https://packages.cyberxyz.io/package/packagist/moodle/moodle): 1185 advisories - [magento/community-edition (packagist)](https://packages.cyberxyz.io/package/packagist/magento/community-edition): 1116 advisories - [openclaw (npm)](https://packages.cyberxyz.io/package/npm/openclaw): 1087 advisories - [org.jenkins-ci.main:jenkins-core (maven)](https://packages.cyberxyz.io/package/maven/org.jenkins-ci.main%3Ajenkins-core): 490 advisories - [tensorflow (pypi)](https://packages.cyberxyz.io/package/pypi/tensorflow): 446 advisories - [tensorflow-gpu (pypi)](https://packages.cyberxyz.io/package/pypi/tensorflow-gpu): 435 advisories - [tensorflow-cpu (pypi)](https://packages.cyberxyz.io/package/pypi/tensorflow-cpu): 435 advisories - [typo3/cms (packagist)](https://packages.cyberxyz.io/package/packagist/typo3/cms): 404 advisories ## Research by CyberXYZ - [Axios npm supply chain attack (2026)](https://cyberxyz.io/blog/axios-supply-chain-attack-2026): compromised maintainer, North Korean RAT dropper, full IOCs. - [Mini Shai-Hulud hits AntV](https://cyberxyz.io/blog/mini-shai-hulud-antv-npm-attack-2026-05-19): 639 malicious versions across 323 npm packages. - [Hades: PyPI Shai-Hulud worm](https://cyberxyz.io/blog/hades-pypi-shai-hulud-worm-2026-06-08): 37 poisoned PyPI projects targeting AI developers. - [CyberXYZ blog](https://cyberxyz.io/blog): all threat research. ## Optional - [Sitemap](https://packages.cyberxyz.io/sitemap.xml): every package and model report. - [Machine-readable summary](https://packages.cyberxyz.io/ai/summary.json) and [FAQ](https://packages.cyberxyz.io/ai/faq.json). - [CyberXYZ product site](https://cyberxyz.io): the install-time supply-chain firewall behind these reports. - [Marketing site llms.txt](https://cyberxyz.io/llms.txt).