EUVD-2025-112977

Malicious code in halley-dotenv-parse-variables-hermes-promise npm...

EUVD-2025-116904

Malicious code in achernar-halley-dotenv-safe-foundation npm...

EUVD-2025-112976

Malicious code in halley-dotenv-safe-rehype-cross-env npm...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...