EUVD-2025-124758

Malicious code in mongoose-module-elektra-halley npm...

EUVD-2025-114668

Malicious code in dactyl-fornax-procyon-halley npm...

EUVD-2025-116085

Malicious code in blaze-antd-halley-pulsar npm...

Malicious code in halley-repository-dorado-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f75725f9f75ccb932f7dbc086b96c3076af491dada30ce8ea604a5c2071120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124802

Malicious code in module-slidev-webdriver-mocha-halley npm...

Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122421

Malicious code in rollup-lynx-halley-local npm...

EUVD-2025-120567

Malicious code in webdriver-mocha-sadr-halley-build npm...

EUVD-2025-111766

Malicious code in less-toml-antares-halley npm...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114567

Malicious code in deneb-europa-halley-kaus npm...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

EUVD-2025-116352

Malicious code in auth0-kinetic-halley-xenon npm...

Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115783

Malicious code in callback-webpack-halley-eridanus npm...

Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-xanadu-rimraf-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f36f1b7e62ebc7816dcaa02e95bcd9db3333ab142284de4d97a1321497a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124103

Malicious code in ophiuchus-halley-graphql-pavo npm...

Malicious code in halley-mysql-server-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ff79e54f23575a8eaefcecf238fe02a47095af96770878b4d382e9964a3475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-kinetic-halley-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274a41db0eed5d4a117b9c311d74680cad370fa7450d02ee18f04633332d3572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...