EUVD-2025-120333

Malicious code in xanadu-hercules-passport-celeste npm...

EUVD-2025-113253

Malicious code in geckodriver-ceres-celeste-firebase npm...

EUVD-2025-124137

Malicious code in octans-upgrade-celeste-chai npm...

EUVD-2025-115588

Malicious code in celeste-pavo-sagitta-development npm...

EUVD-2025-115594

Malicious code in celeste-markdown-event-nconf npm...

EUVD-2025-124301

Malicious code in non-blocking-sass-loader-celeste-norma npm...

EUVD-2025-115587

Malicious code in celeste-remark-readable-rocket npm...

EUVD-2025-113061

Malicious code in gridsome-sails-celeste-publish npm...

Malicious code in gridsome-sails-celeste-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef30a7ff486673f6489f409abca3e079dd979bc23c287b2d198e1b0ce77da7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120426

Malicious code in winston-koa-wasat-celeste npm...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116065

Malicious code in blitz-celeste-slidev-got npm...

MAL-2025-140154 Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0b93c3ef015e6aa400f4106766563254f0e2fc58bd1dff4a01ee9921e39aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-wezen-celeste-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f48cfa36fc13439057ca8acb57b8ad7788370235a7ca5a7a31780179d367ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113678

Malicious code in fetch-bellatrix-celeste-jwt npm...

EUVD-2025-120924

Malicious code in upgrade-celeste-subscription-avior npm...

EUVD-2025-112284

Malicious code in janus-query-lint-staged-celeste npm...

EUVD-2025-116832

Malicious code in aldebaran-celeste-fusion-configstore npm...

MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...