MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111243

Malicious code in metalsmith-celeste-commitlint-config-angular-gacrux npm...

EUVD-2025-115360

Malicious code in child-process-framework-metalsmith-celeste npm...