307 matches found
Malicious Package
Overview dagda-castor-xo-callback is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
castor-extractor (>=0.21.7, <=0.21.9), ledfx (2.0.105) +3 more potentially affected by CVE-2026-59890 via setuptools (75.3.4)
setuptools PYPI version 75.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - castor-extractor =0.21.7, =3.41.0, =0.27.0, =0.1.0, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...
castor-extractor (>=0.21.7, <=0.21.9), ledfx (2.0.105) +3 more potentially affected by CVE-2026-59890 via setuptools (75.3.4)
setuptools PYPI version 75.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - castor-extractor =0.21.7, =3.41.0, =0.27.0, =0.1.0, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...
com.pro-crafting.tools:jasperreports-plugin (3.5.4), net.sf.jasperreports:jasperreports-castor (6.20.3) +7 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.20.3)
net.sf.jasperreports:jasperreports MAVEN version 6.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.pro-crafting.tools:jasperreports-plugin 3.5.4 -...
EUVD-2025-177744
Malicious code in mui-delphinus-castor-magnetosphere npm...
EUVD-2025-179862
Malicious code in castor-callisto-miranda-quasar npm...
MAL-2025-187980 Malicious code in mensa-koa-castor-typeorm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c11e9097d5c00ae335a975d0bd038394411ebb396691bf1af493adad32a9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176069
Malicious code in taphonomy-phoebe-castor-terraforming npm...
EUVD-2025-179370
Malicious code in deimos-await-castor-dotenv npm...
EUVD-2025-179860
Malicious code in castor-ganymede-registry-blaze npm...
EUVD-2025-179858
Malicious code in castor-magellan-halley-equinox npm...
EUVD-2025-176313
Malicious code in sociobiology-castor-package-prompts npm...
EUVD-2025-179857
Malicious code in castor-singularitarianism-parcel-perseus npm...
EUVD-2025-179861
Malicious code in castor-cosmology-planetology-toml npm...
Malicious code in castor-ganymede-registry-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb99fb904b107d2e5916b03e976fd9934c58aa09d3cc1cf8f64ee21bc92563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in castor-magellan-halley-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179468
Malicious code in css-loader-castor-supervisor-elara npm...
EUVD-2025-175474
Malicious code in xo-castor-frontend-indus npm...