284 matches found
EUVD-2025-114720
Malicious code in cygnus-zenobia-castor-release-it npm...
EUVD-2025-115625
Malicious code in castor-cordelia-neptune-webpack npm...
Malicious code in castor-andromeda-spawn-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5dee896748b52c2d7d49f76d856e114537060fe2f8e84d7e7a1bba31b762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121705
Malicious code in sqlite-ariel-spawn-castor npm...
MAL-2025-143469 Malicious code in hyperion-dependencies-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121307
Malicious code in tethys-helmet-markdownlint-castor npm...
EUVD-2025-122679
Malicious code in remark-castor-ophiuchus-lynx npm...
EUVD-2025-115609
Malicious code in castor-weywot-kinetic-chalk npm...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143786 Malicious code in jabbah-odin-castor-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305501ec1d001acbb239d5dd7c8b27592441584f5b792582fb454d30a2db986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115621
Malicious code in castor-kronos-jwt-convict npm...
MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149708 Malicious code in xerxes-jsonp-castor-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112136
Malicious code in json-nashira-kinetic-castor npm...
EUVD-2025-112643
Malicious code in hyperion-dependencies-query-castor npm...
Malicious code in dagda-castor-xo-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slidev-xanadu-xo-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112981
Malicious code in halley-castor-less-loader-quasar npm...