452 matches found
Malicious code in cluster-css-loader-halley-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122421
Malicious code in rollup-lynx-halley-local npm...
EUVD-2025-120567
Malicious code in webdriver-mocha-sadr-halley-build npm...
EUVD-2025-111766
Malicious code in less-toml-antares-halley npm...
Malicious code in halley-jovian-carpo-sadr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114567
Malicious code in deneb-europa-halley-kaus npm...
EUVD-2025-112956
Malicious code in halley-mysql-server-sync npm...
EUVD-2025-114198
Malicious code in electron-builder-spica-halley-winston npm...
EUVD-2025-112985
Malicious code in halley-airbnb-toml-jovian npm...
Malicious code in halley-semantic-ui-proxima-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-resolvers-pm2-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121154
Malicious code in transform-start-halley-cassini npm...
Malicious code in hapi-winston-halley-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113934
Malicious code in eris-meteor-dependencies-halley npm...
EUVD-2025-112982
Malicious code in halley-auth-vega-eslint-plugin npm...
EUVD-2025-112977
Malicious code in halley-dotenv-parse-variables-hermes-promise npm...
Malicious code in private-halley-nodejs-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112979
Malicious code in halley-cosmiconfig-nodejs-ganymede npm...