820 matches found
CVE-2025-12787
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...
Malicious code in fornax-metalsmith-fork-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5b8e68461ff828257fd3b73d19f935cbd1d9b9033b8aea6b327f49d220c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114852
Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...
Malicious code in hydra-rigel-eris-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116668
Malicious code in antares-prompts-wolf-hydra npm...
EUVD-2025-116340
Malicious code in avior-axios-hydra-wezen npm...
EUVD-2025-121605
Malicious code in stream-jasmine-global-hydra npm...
EUVD-2025-112663
Malicious code in hydra-pavo-taurus-betelgeuse npm...
Malicious code in orbit-hydra-test-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antares-prompts-wolf-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115539
Malicious code in ceres-hydra-rocket-stop npm...
EUVD-2025-115226
Malicious code in comet-mutation-hydra-spawn npm...
EUVD-2025-122377
Malicious code in run-script-gulp-hydra-jekyll npm...
EUVD-2025-112677
Malicious code in hydra-betelgeuse-prompts-soap npm...
EUVD-2025-120751
Malicious code in vortex-antares-axios-hydra npm...
EUVD-2025-112664
Malicious code in hydra-ora-npm-nashira npm...
EUVD-2025-124090
Malicious code in ophiuchus-ophiuchus-hydra-yakutsk npm...
EUVD-2025-123358
Malicious code in process-prettier-plugin-markdown-ganymede-hydra npm...
Malicious code in airbnb-relay-hydra-nova (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5aac16f1f71a40b66a4d15575c7941b18cb0512e745728dd89bc41dabb55d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...