Malicious code in kastra-perseus-comet-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba13e6972332291be48505d01dfa79462dbb30b76789d9acd10da211473f2447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180265

Malicious code in async-kastra-archaeoastronomy-exobiology npm...

EUVD-2025-176739

Malicious code in regulus-protoplanetarydisk-quito-kastra npm...

EUVD-2025-176436

Malicious code in semantic-release-boson-lepton-kastra npm...

EUVD-2025-177406

Malicious code in orogeny-algol-kastra-xo npm...

EUVD-2025-177453

Malicious code in on-xanthus-panspermia-kastra npm...

Malicious code in dione-kastra-public-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e45af73e65c8bb69b8936ef251a668c188721bb919947f8884f6ae981cf02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176846

Malicious code in quasar-capella-bootstrap-kastra npm...

Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177022

Malicious code in promise-aurora-kastra-backend npm...

EUVD-2025-176678

Malicious code in resolvers-foundation-library-kastra npm...

EUVD-2025-178469

Malicious code in hyperion-kastra-paleontology-magnetosphere npm...

EUVD-2025-180510

Malicious code in accretion-kastra-nightmare-module npm...

MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179128

Malicious code in enif-wavefunction-phoebe-kastra npm...

EUVD-2025-179315

Malicious code in despina-kastra-forever-supervisor npm...

EUVD-2025-179295

Malicious code in dione-kastra-public-react-bootstrap npm...

EUVD-2025-177677

Malicious code in nebula-gulp-bootes-kastra npm...

Malicious code in equinox-kastra-pulsar-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e7bb6aee60dd97332f2cbbd9c110f17a7cf40c2cf296da8e53fdb919edfdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177582

Malicious code in nightwatch-wolf-kastra-seismology npm...