EUVD-2025-120383

Malicious code in wolf-enceladus-telesto-nebula npm...

EUVD-2025-121436

Malicious code in telesto-element-ui-sedna-repository npm...

EUVD-2025-124803

Malicious code in module-run-script-telesto-writable npm...

EUVD-2025-114142

Malicious code in element-ui-fornax-telesto-local npm...

MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148490 Malicious code in telesto-aquarius-apex-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c69141f3d539b7b8b758d6cba8108ee1a7af3ebe626b704d04a5561d5f7f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121428

Malicious code in telesto-readable-forever-winston npm...

EUVD-2025-123056

Malicious code in puppeteer-telesto-ursa-gacrux npm...

EUVD-2025-120894

Malicious code in upgrade-telesto-forever-webdriver-mocha npm...

EUVD-2025-121427

Malicious code in telesto-release-it-google-javascript npm...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121424

Malicious code in telesto-wasat-delphinus-halley npm...

EUVD-2025-116875

Malicious code in aether-cache-telesto-janus npm...

Malicious code in telesto-adonis-private-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296dbe3b7c4a799c4b3747043791be2e3e195b8e46d0351f9297646c4408e1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121437

Malicious code in telesto-child-process-betelgeuse-webdriver-manager npm...

EUVD-2025-122163

Malicious code in sedna-cli-csrf-telesto npm...

EUVD-2025-115341

Malicious code in chromedriver-development-meissa-telesto npm...

MAL-2025-142641 Malicious code in fornax-neptune-telesto-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fd2f930b41dcba2fb86f7520b301510a5345895d0d37918b00f721db9fd953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149035 Malicious code in upgrade-telesto-forever-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991719e6fabbfb2f836d676ac219365c07b5cf2a8dd616e1734bc8da03db23bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...