280 matches found
MAL-2025-140495 Malicious code in castor-soap-venus-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115622
Malicious code in castor-hyperion-semantic-release-fusion npm...
EUVD-2025-120993
Malicious code in umbra-yaml-castor-axios npm...
EUVD-2025-123288
Malicious code in promise-castor-pyxis-pipe npm...
EUVD-2025-115613
Malicious code in castor-reveal-md-react-bootstrap-soap npm...
EUVD-2025-115619
Malicious code in castor-markdownlint-semantic-ui-neptune npm...
EUVD-2025-123965
Malicious code in parcel-eslint-config-castor-eleventy npm...
Malicious code in chakra-ui-indus-castor-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559b6440cf8de7895eaea748dfd87f39f1aa885f93498362d0745a609484be05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-zenobia-castor-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141383 Malicious code in cygnus-subscription-loglevel-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a14f5f7acca2db1c52ece29d5ea1c8cc85499a0ac6b337fcb30226a7f4fe4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143304 Malicious code in hermes-castor-pm2-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148118 Malicious code in spectron-jwt-test-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702cde07f03f4885a11ae7d9d457fd5e920a336aa942f35fbd400f74af5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2006-5466
Malware in sbrugna...
EUVD-2006-5465
Malware in sbrugna...
EUVD-2022-4455
Malicious code in bioql PyPI...
marshalsec
It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...