307 matches found
Malicious Package
Overview dagda-castor-xo-callback is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
castor-extractor (>=0.21.7, <=0.21.9), ledfx (2.0.105) +3 more potentially affected by CVE-2026-59890 via setuptools (75.3.4)
setuptools PYPI version 75.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - castor-extractor =0.21.7, =3.41.0, =0.27.0, =0.1.0, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...
castor-extractor (>=0.21.7, <=0.21.9), ledfx (2.0.105) +3 more potentially affected by CVE-2026-59890 via setuptools (75.3.4)
setuptools PYPI version 75.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - castor-extractor =0.21.7, =3.41.0, =0.27.0, =0.1.0, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...
com.pro-crafting.tools:jasperreports-plugin (3.5.4), net.sf.jasperreports:jasperreports-castor (6.20.3) +7 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.20.3)
net.sf.jasperreports:jasperreports MAVEN version 6.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.pro-crafting.tools:jasperreports-plugin 3.5.4 -...
EUVD-2025-177744
Malicious code in mui-delphinus-castor-magnetosphere npm...
EUVD-2025-178749
Malicious code in gemini-csv-cryonics-castor npm...
EUVD-2025-177902
Malicious code in mensa-koa-castor-typeorm npm...
EUVD-2025-179859
Malicious code in castor-janus-interferometry-asteroid npm...
EUVD-2025-176816
Malicious code in radiant-relay-castor-bulma npm...
EUVD-2025-176313
Malicious code in sociobiology-castor-package-prompts npm...
EUVD-2025-179858
Malicious code in castor-magellan-halley-equinox npm...
EUVD-2025-179863
Malicious code in castor-avior-nebula-heka npm...
EUVD-2025-176523
Malicious code in sass-loader-castor-prettier-stylelint-lint npm...
EUVD-2025-179856
Malicious code in castor-warp-asthenosphere-apollo npm...
EUVD-2025-179857
Malicious code in castor-singularitarianism-parcel-perseus npm...
EUVD-2025-179861
Malicious code in castor-cosmology-planetology-toml npm...
EUVD-2025-179862
Malicious code in castor-callisto-miranda-quasar npm...
Malicious code in castor-magellan-halley-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...