MAL-2025-187273 Malicious code in halley-xanthus-aquarius-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65980ae484a66d6f3d0542f8cf21482dd3a48599965d67854c37e71e37fb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180240

Malicious code in auriga-eslint-halley-fetch npm...

EUVD-2025-175451

Malicious code in yaml-halley-astrobiology-mutation npm...

MAL-2025-186024 Malicious code in castor-magellan-halley-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185648 Malicious code in auriga-eslint-halley-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0bd6588a9174fc25cd49a2b2bb3fb8a2d06d58e3da4b7775a007a7ce02483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178609

Malicious code in halley-xanthus-aquarius-fornax npm...

EUVD-2025-178618

Malicious code in halley-bioinformatics-mui-venus npm...

Malicious code in perseus-query-halley-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110c96b540f872d651ac47fdfce3f49caac30f01ee4f9c559fcf0f20d03f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-magellan-halley-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112977

Malicious code in halley-dotenv-parse-variables-hermes-promise npm...

EUVD-2025-112958

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...

EUVD-2025-114668

Malicious code in dactyl-fornax-procyon-halley npm...

EUVD-2025-115586

Malicious code in celeste-rimraf-despina-halley npm...

EUVD-2025-112858

Malicious code in helmet-miranda-halley-colors npm...

EUVD-2025-121106

Malicious code in triton-phenomic-halley-sagitta npm...

Malicious code in halley-pino-pretty-delphinus-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c4734fe14f854cc4ba56e59672864984edd54b722ce1a7646d86b77e503662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112779

Malicious code in hermes-wolf-module-halley npm...

EUVD-2025-121952

Malicious code in sirius-resolvers-pm2-halley npm...

EUVD-2025-112969

Malicious code in halley-graphql-miranda-changelog npm...

EUVD-2025-113750

Malicious code in exec-sass-loader-acamar-halley npm...