EUVD-2025-180027

Malicious code in blaze-transport-genomics-telesto npm...

EUVD-2025-176015

Malicious code in telesto-vulcan-chai-cressida npm...

EUVD-2025-176561

Malicious code in sagitta-javascript-process-telesto npm...

EUVD-2025-176017

Malicious code in telesto-spectron-sagitta-soap npm...

EUVD-2025-176020

Malicious code in telesto-prettier-stylelint-cors-janus npm...

EUVD-2025-176239

Malicious code in sqlite-telesto-commitlint-figures npm...

EUVD-2025-178120

Malicious code in less-prettier-stylelint-warp-telesto npm...

EUVD-2025-176018

Malicious code in telesto-redis-ophiuchus-radioastronomy npm...

MAL-2025-189421 Malicious code in sedna-telesto-webpack-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc3a8b377d064eec4fc94c2c9bb78ddb6977bd0cce2e213300540e3d06c6e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190379 Malicious code in xenos-lepton-cosmogenic-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd42edaad102d51c7897f5f9f97d176aabb390e1ccf4beee36af7105a32ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188157 Malicious code in mutation-telesto-cybernetics-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93feef1dbf14cc4a7a5a3b3d8135960ead9bd867f10c2706c5411df97417a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179436

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...

Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176019

Malicious code in telesto-publish-oberon-charon npm...

EUVD-2025-176454

Malicious code in sedna-telesto-webpack-public npm...

EUVD-2025-177060

Malicious code in primatology-callback-dactyl-telesto npm...

EUVD-2025-178878

Malicious code in fomalhaut-jabbah-telesto-antares npm...

EUVD-2025-175501

Malicious code in xenon-release-it-telesto-jabbah npm...

EUVD-2025-177363

Malicious code in paleoecology-cygnus-jovian-telesto npm...

EUVD-2025-176022

Malicious code in telesto-neptune-tethys-shelljs npm...