280 matches found
EUVD-2025-115612
Malicious code in castor-soap-venus-adonis npm...
Malicious code in altair-promise-castor-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121466
Malicious code in taurus-castor-alphard-update npm...
EUVD-2025-115032
Malicious code in convict-jsonp-query-castor npm...
Malicious code in castor-soap-venus-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121551
Malicious code in superagent-castor-mongoose-morgan npm...
EUVD-2025-115609
Malicious code in castor-weywot-kinetic-chalk npm...
EUVD-2025-121705
Malicious code in sqlite-ariel-spawn-castor npm...
EUVD-2025-124851
Malicious code in mocha-andromeda-castor-loopback npm...
EUVD-2025-122679
Malicious code in remark-castor-ophiuchus-lynx npm...
EUVD-2025-112808
Malicious code in hermes-castor-pm2-celeste npm...
Malicious code in sedna-castor-nightwatch-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b82800c207357c47644279b2c470bfe39a94a201027e0cd5e7aeb4ec123eb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115621
Malicious code in castor-kronos-jwt-convict npm...
EUVD-2025-115627
Malicious code in castor-alphard-sirius-cordelia npm...
Malicious code in slidev-xanadu-xo-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112136
Malicious code in json-nashira-kinetic-castor npm...
EUVD-2025-112981
Malicious code in halley-castor-less-loader-quasar npm...
EUVD-2025-112584
Malicious code in ignite-stop-castor-triton npm...