284 matches found
Malicious code in dagda-castor-xo-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slidev-xanadu-xo-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115032
Malicious code in convict-jsonp-query-castor npm...
EUVD-2025-121756
Malicious code in spica-mocha-castor-inquirer npm...
EUVD-2025-112136
Malicious code in json-nashira-kinetic-castor npm...
EUVD-2025-121307
Malicious code in tethys-helmet-markdownlint-castor npm...
EUVD-2025-114645
Malicious code in dagda-castor-xo-callback npm...
EUVD-2025-116362
Malicious code in auth0-carpo-npm-castor npm...
EUVD-2025-115029
Malicious code in convict-mocha-castor-proxima npm...
EUVD-2025-115621
Malicious code in castor-kronos-jwt-convict npm...
EUVD-2025-112643
Malicious code in hyperion-dependencies-query-castor npm...
Malicious code in castor-soap-venus-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116628
Malicious code in apex-castor-gridsome-avior npm...
EUVD-2025-121466
Malicious code in taurus-castor-alphard-update npm...
EUVD-2025-115624
Malicious code in castor-cypress-figures-betelgeuse npm...
Malicious code in jabbah-odin-castor-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305501ec1d001acbb239d5dd7c8b27592441584f5b792582fb454d30a2db986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sedna-castor-nightwatch-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b82800c207357c47644279b2c470bfe39a94a201027e0cd5e7aeb4ec123eb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112584
Malicious code in ignite-stop-castor-triton npm...