EUVD-2025-124240

Malicious code in npm-leda-cz-conventional-changelog-halley npm...

EUVD-2025-123565

Malicious code in polaris-module-quito-halley npm...

EUVD-2025-112133

Malicious code in json-prettier-stylelint-leda-halley npm...

EUVD-2025-112949

Malicious code in halley-puppeteer-package-fornax npm...

EUVD-2025-124642

Malicious code in nashira-halley-eclipse-zenith npm...

MAL-2025-147501 Malicious code in rollup-lynx-halley-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa72a4e4403fc64b5e80a29aa6fe134a65347485b04d344bf684201c40dae9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147038 Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145884 Malicious code in ora-halley-equinox-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17eefaa0049e9ad89efa16d16def14a0dcafe1a3cb50d8e977ad7885dd1feb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146533 Malicious code in private-halley-nodejs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121751

Malicious code in spica-promise-halley-chariklo npm...

MAL-2025-143163 Malicious code in halley-puppeteer-package-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871c11095debc0e81b502647d58e68f9fb323417086115417a0e62c0f37d3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145276 Malicious code in nashira-halley-eclipse-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92aad2c8661c92e2faf142d7e97db55b4c9eb503c256a5cc5aa3b8c84acab377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139796 Malicious code in await-dactyl-flare-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997e94e577b4a4ff7fc6f45c2326910b7e2834f4394205bbbd2358585a5f584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143174 Malicious code in halley-xenon-redis-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a82fb14fc14d212a9598dafb9eea71406a66225bce74082297225fcbb50c261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146468 Malicious code in prettier-fornax-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de39dbf074648170ab74202eeed10b390bf1cb8832895dfec891d1612bcc4879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149158 Malicious code in virgo-halley-norma-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd7da4e4986eec5dab4e8e83d3b4496f034399ef46a1ac01bc2c091f61fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...