EUVD-2025-121599

Malicious code in stream-mysql-typeorm-halley npm...

Malicious code in halley-izar-acamar-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2f69723e6ac45a8f9eec34bd98de043eb4fd1d3f3a42a1a89db218a461dd9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112490

Malicious code in init-halley-non-blocking-frontend npm...

EUVD-2025-123739

Malicious code in phoebe-spectron-halley-promise npm...

EUVD-2025-113667

Malicious code in fetch-halley-await-dotenv-safe npm...

EUVD-2025-121189

Malicious code in tool-leda-mensa-halley npm...

EUVD-2025-122376

Malicious code in run-script-halley-reveal-md-passport npm...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112952

Malicious code in halley-pino-pretty-delphinus-fusion npm...

EUVD-2025-120932

Malicious code in update-halley-framework-auriga npm...

EUVD-2025-112974

Malicious code in halley-enceladus-install-carpo npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-112966

Malicious code in halley-ignite-protractor-sync npm...

Malicious code in halley-phoenix-io-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731fa23aff766760f0a59030baa0ab809c1d44a802dee5f4ec14814ab781d4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-module-elektra-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a0129e705995946096cc1b09d89db140a9664dde18adae9da16c0059a0004d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-rollup-plugin-halley-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113643

Malicious code in figures-halley-cygnus-comet npm...

EUVD-2025-113529

Malicious code in fork-css-loader-halley-markdown-pdf npm...

EUVD-2025-113715

Malicious code in express-winston-yakutsk-halley npm...

Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...