MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124301

Malicious code in non-blocking-sass-loader-celeste-norma npm...

EUVD-2025-115587

Malicious code in celeste-remark-readable-rocket npm...

EUVD-2025-120426

Malicious code in winston-koa-wasat-celeste npm...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-wezen-celeste-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f48cfa36fc13439057ca8acb57b8ad7788370235a7ca5a7a31780179d367ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116832

Malicious code in aldebaran-celeste-fusion-configstore npm...

EUVD-2025-113253

Malicious code in geckodriver-ceres-celeste-firebase npm...

EUVD-2025-121815

Malicious code in spectron-celeste-release-it-sqlite npm...

EUVD-2025-114171

Malicious code in elektra-changelog-spinner-celeste npm...

Malicious code in celeste-config-selenium-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6557ff806d9528610cfa50b00d324b820063aa1b1f69bc59259f22e2e0ce1e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112808

Malicious code in hermes-castor-pm2-celeste npm...

EUVD-2025-115661

Malicious code in carpo-jest-celeste-blaze npm...

EUVD-2025-116065

Malicious code in blitz-celeste-slidev-got npm...

EUVD-2025-113025

Malicious code in grus-celeste-rigel-iota npm...

EUVD-2025-113450

Malicious code in fornax-wezen-celeste-auriga npm...

EUVD-2025-115303

Malicious code in cli-norma-celeste-less npm...

EUVD-2025-120333

Malicious code in xanadu-hercules-passport-celeste npm...

Malicious code in gridsome-sails-celeste-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef30a7ff486673f6489f409abca3e079dd979bc23c287b2d198e1b0ce77da7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...