EUVD-2025-115226

Malicious code in comet-mutation-hydra-spawn npm...

EUVD-2025-120866

Malicious code in ursa-meteor-hydra-oberon npm...

EUVD-2025-122592

Malicious code in resolvers-kastra-hydra-eclipse npm...

Malicious code in hydra-stream-express-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114205

Malicious code in electron-builder-hydra-mensa-stream npm...

EUVD-2025-112943

Malicious code in halley-superagent-hydra-sqlite npm...

EUVD-2025-124354

Malicious code in nodejs-hydra-jest-quito npm...

EUVD-2025-123358

Malicious code in process-prettier-plugin-markdown-ganymede-hydra npm...

EUVD-2025-115539

Malicious code in ceres-hydra-rocket-stop npm...

Malicious code in quark-mui-adonis-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dd63bf0f4f6b67fe7138fe02f89ed61db758afc8603d44016f528d34166716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123799

Malicious code in perseus-typeorm-mongodb-hydra npm...

EUVD-2025-114852

Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...

EUVD-2025-114637

Malicious code in dagda-hydra-centaurus-hexo npm...

EUVD-2025-111526

Malicious code in lynx-avior-pino-hydra npm...

MAL-2025-143443 Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143442 Malicious code in hydra-frontend-testcafe-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a9d5ac6a8f78a91341338dcf450760dfae65194d9d62eefb8b885ef7ded353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139757 Malicious code in auth0-schema-nightwatch-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fb466e8ca9d678f6b37b895e5922e2d185b269f83992618d61b99e4e322732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146232 Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...