EUVD-2025-112808

Malicious code in hermes-castor-pm2-celeste npm...

EUVD-2025-114720

Malicious code in cygnus-zenobia-castor-release-it npm...

EUVD-2025-116628

Malicious code in apex-castor-gridsome-avior npm...

EUVD-2025-115624

Malicious code in castor-cypress-figures-betelgeuse npm...

EUVD-2025-121756

Malicious code in spica-mocha-castor-inquirer npm...

Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115032

Malicious code in convict-jsonp-query-castor npm...

EUVD-2025-124851

Malicious code in mocha-andromeda-castor-loopback npm...

EUVD-2025-115612

Malicious code in castor-soap-venus-adonis npm...

EUVD-2025-121705

Malicious code in sqlite-ariel-spawn-castor npm...

Malicious code in slidev-xanadu-xo-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112136

Malicious code in json-nashira-kinetic-castor npm...

EUVD-2025-121307

Malicious code in tethys-helmet-markdownlint-castor npm...

EUVD-2025-115627

Malicious code in castor-alphard-sirius-cordelia npm...

Malicious code in altair-promise-castor-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144970 Malicious code in mini-css-extract-plugin-capella-lacerta-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b5bc74934a8bac1cf36c483b27d6fbdb0ad09d79f4471cbac2695209ecf5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143469 Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149541 Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...