280 matches found
EUVD-2025-116257
Malicious code in babel-auth0-castor-csrf npm...
EUVD-2025-115614
Malicious code in castor-rest-orbit-xml npm...
EUVD-2025-112214
Malicious code in jekyll-castor-dependencies-nashira npm...
EUVD-2025-123288
Malicious code in promise-castor-pyxis-pipe npm...
EUVD-2025-111359
Malicious code in materialize-spinner-superagent-castor npm...
MAL-2025-148118 Malicious code in spectron-jwt-test-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702cde07f03f4885a11ae7d9d457fd5e920a336aa942f35fbd400f74af5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140495 Malicious code in castor-soap-venus-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139864 Malicious code in babel-jasmine-castor-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ddfcaa81c5d467716db5e44e99c6e24f2c2417a0d54a417a3582fd20187a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140497 Malicious code in castor-webdriverio-fornax-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76177615ff9f0df95a462a669496d6ff6766962521bbb77e7631aaa6df847447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141383 Malicious code in cygnus-subscription-loglevel-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a14f5f7acca2db1c52ece29d5ea1c8cc85499a0ac6b337fcb30226a7f4fe4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143304 Malicious code in hermes-castor-pm2-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2006-5466
Malware in sbrugna...
EUVD-2006-5465
Malware in sbrugna...
EUVD-2022-4455
Malicious code in bioql PyPI...
marshalsec
It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...