EUVD-2025-112676

Malicious code in hydra-browserify-oberon-umbriel npm...

Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112658

Malicious code in hydra-rimraf-apollo-gacrux npm...

EUVD-2025-112671

Malicious code in hydra-eslint-config-nodejs-triton npm...

EUVD-2025-112665

Malicious code in hydra-neptune-ursa-jest npm...

EUVD-2025-112675

Malicious code in hydra-canopus-subscription-fornax npm...

EUVD-2025-113408

Malicious code in frontend-hydra-morgan-chromedriver npm...

EUVD-2025-112164

Malicious code in jovian-hydra-chakra-ui-rimraf npm...

EUVD-2025-121726

Malicious code in spinner-hydra-mocha-rest npm...

EUVD-2025-112659

Malicious code in hydra-rigel-eris-module npm...

Malicious code in chai-hydra-nova-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88802ffb106059937972a18c280935bd5f60825e8fa115b270389316dced2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112674

Malicious code in hydra-cressida-wasat-polaris npm...

EUVD-2025-123689

Malicious code in pino-pretty-frontend-sqlite-hydra npm...

Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112678

Malicious code in hydra-bellatrix-backend-sadr npm...

EUVD-2025-121543

Malicious code in superagent-hydra-kinetic-procyon npm...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-typeorm-mongodb-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-rimraf-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862ee4d81cec6ce838fc6610ce9041b85853f5d7b913a818c76b52999ae9d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...