EUVD-2025-178486

Malicious code in hydra-cryovolcano-darkmatter-quasarjet npm...

MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178481

Malicious code in hydra-lepton-interstellarmedium-entanglement npm...

EUVD-2025-178484

Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin npm...

EUVD-2025-175773

Malicious code in uranology-version-flare-hydra npm...

MAL-2025-187403 Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aa39d2cf73e1508204d2e22e08291cfcfeb4fdecb5a627d7b869aca7ae494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12787

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...

EUVD-2025-121964

Malicious code in sirius-loop-axios-hydra npm...

EUVD-2025-112672

Malicious code in hydra-equinox-auriga-enif npm...

EUVD-2025-116668

Malicious code in antares-prompts-wolf-hydra npm...

EUVD-2025-124090

Malicious code in ophiuchus-ophiuchus-hydra-yakutsk npm...

EUVD-2025-120572

Malicious code in webdriver-mocha-miranda-virgo-hydra npm...

Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112664

Malicious code in hydra-ora-npm-nashira npm...

EUVD-2025-112651

Malicious code in hydra-wasat-venus-ini npm...

EUVD-2025-112653

Malicious code in hydra-stream-express-lynx npm...

EUVD-2025-120751

Malicious code in vortex-antares-axios-hydra npm...

EUVD-2025-113877

Malicious code in eslint-plugin-ignite-carina-hydra npm...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...