280 matches found
EUVD-2025-121465
Malicious code in taurus-castor-concurrently-nextjs npm...
Malicious code in hyperion-dependencies-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121807
Malicious code in spectron-jwt-test-castor npm...
EUVD-2025-112327
Malicious code in jabbah-odin-castor-lynx npm...
EUVD-2025-115623
Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin npm...
EUVD-2025-121738
Malicious code in spinner-castor-commitizen-dependencies npm...
EUVD-2025-120797
Malicious code in version-callback-husky-castor npm...
EUVD-2025-116193
Malicious code in barnard-izar-castor-fusion npm...
Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114884
Malicious code in cressida-castor-await-telesto npm...
Malicious code in taurus-castor-concurrently-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140491 Malicious code in castor-ophiuchus-socketio-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89628c22eecadb0e3a72e314b6f2162c8d82153b70aa48aa99188ce9a8832469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140842 Malicious code in colors-castor-relay-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c75aed1456301b04a480773fe6fe44291764aff92c44fcc99cf54689e3f21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141077 Malicious code in convict-jsonp-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...