452 matches found
EUVD-2025-123485
Malicious code in postgres-inquirer-octans-halley npm...
EUVD-2025-124677
Malicious code in mysql-comet-alphard-halley npm...
EUVD-2025-124788
Malicious code in mongodb-halley-pavo-hyperion npm...
EUVD-2025-114818
Malicious code in csrf-nconf-halley-jest npm...
EUVD-2025-112617
Malicious code in hyperion-release-it-halley-radiant npm...
EUVD-2025-116099
Malicious code in betelgeuse-run-script-remark-halley npm...
Malicious code in halley-ignite-protractor-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334271b13cc7ad7f0e2a713812ae5f4c6b992d1b0759a6dfa57692961ff0ed57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123263
Malicious code in prompts-andromeda-dynamo-halley npm...
EUVD-2025-124151
Malicious code in octans-halley-phenomic-celeste npm...
EUVD-2025-116168
Malicious code in bellatrix-dorado-halley-sagitta npm...
EUVD-2025-120771
Malicious code in virgo-halley-norma-cors npm...
EUVD-2025-112961
Malicious code in halley-jupiter-norma-polaris npm...
EUVD-2025-120747
Malicious code in vortex-halley-envconfig-sagitta npm...
EUVD-2025-122884
Malicious code in rate-limiter-google-halley-changelog npm...
EUVD-2025-113750
Malicious code in exec-sass-loader-acamar-halley npm...
Malicious code in halley-enceladus-install-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120381
Malicious code in wolf-halley-weywot-socketio npm...
Malicious code in config-commitlint-config-angular-jwt-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...