Malicious code in halley-cosmiconfig-nodejs-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dade96fb0e2431b0716ce1e1641fac7e05a2a2cad951c5e33772fc3cec2128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121106

Malicious code in triton-phenomic-halley-sagitta npm...

EUVD-2025-123135

Malicious code in publish-hermes-halley-draco npm...

EUVD-2025-112858

Malicious code in helmet-miranda-halley-colors npm...

EUVD-2025-123320

Malicious code in procyon-kronos-materialize-halley npm...

EUVD-2025-112913

Malicious code in hapi-winston-halley-fornax npm...

EUVD-2025-114121

Malicious code in eleventy-aether-package-halley npm...

EUVD-2025-120381

Malicious code in wolf-halley-weywot-socketio npm...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124308

Malicious code in non-blocking-lacerta-halley-dependencies npm...

EUVD-2025-112965

Malicious code in halley-ini-neptune-quasar npm...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143133 Malicious code in halley-cosmiconfig-nodejs-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dade96fb0e2431b0716ce1e1641fac7e05a2a2cad951c5e33772fc3cec2128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146436 Malicious code in postgres-inquirer-octans-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cddb6832b76e91d97d935d0d9d8a7f26ee084ca8b89b9e2b9d0a4a080d35ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121487

Malicious code in tailwindcss-halley-docusaurus-pegasus npm...

EUVD-2025-115870

Malicious code in bulma-venus-test-halley npm...

EUVD-2025-122376

Malicious code in run-script-halley-reveal-md-passport npm...

MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143156 Malicious code in halley-mysql-server-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ff79e54f23575a8eaefcecf238fe02a47095af96770878b4d382e9964a3475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...