EUVD-2025-112195

Malicious code in jest-castor-stream-altair npm...

EUVD-2025-116193

Malicious code in barnard-izar-castor-fusion npm...

EUVD-2025-120797

Malicious code in version-callback-husky-castor npm...

Malicious code in tethys-helmet-markdownlint-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dd146f8b14178ac1a675fc49a5c08c881775ce18fd6b985c364ac18b26bbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120390

Malicious code in wolf-castor-rimraf-phoenix npm...

EUVD-2025-121807

Malicious code in spectron-jwt-test-castor npm...

EUVD-2025-121738

Malicious code in spinner-castor-commitizen-dependencies npm...

EUVD-2025-116707

Malicious code in antares-castor-yonder-publish npm...

EUVD-2025-124893

Malicious code in miranda-commitlint-config-angular-castor-thuban npm...

EUVD-2025-115623

Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin npm...

EUVD-2025-115266

Malicious code in colors-castor-relay-slidev npm...

EUVD-2025-114149

Malicious code in element-ui-castor-janus-quito npm...

Malicious code in spectron-jwt-test-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702cde07f03f4885a11ae7d9d457fd5e920a336aa942f35fbd400f74af5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123812

Malicious code in perseus-quark-arcturus-castor npm...

EUVD-2025-115608

Malicious code in castor-xo-process-yildun npm...

Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116308

Malicious code in await-castor-middleware-chakra-ui npm...

EUVD-2025-121016

Malicious code in ultra-ultra-castor-betelgeuse npm...

EUVD-2025-116238

Malicious code in babel-jasmine-castor-sqlite npm...

Malicious code in convict-jsonp-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...