820 matches found
EUVD-2025-124014
Malicious code in orbit-hydra-test-venus npm...
EUVD-2025-124354
Malicious code in nodejs-hydra-jest-quito npm...
EUVD-2025-113877
Malicious code in eslint-plugin-ignite-carina-hydra npm...
Malicious code in soap-vega-hydra-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112943
Malicious code in halley-superagent-hydra-sqlite npm...
EUVD-2025-122592
Malicious code in resolvers-kastra-hydra-eclipse npm...
EUVD-2025-112653
Malicious code in hydra-stream-express-lynx npm...
EUVD-2025-112489
Malicious code in init-hugo-markdownlint-hydra npm...
EUVD-2025-121964
Malicious code in sirius-loop-axios-hydra npm...
EUVD-2025-122993
Malicious code in quark-mui-adonis-hydra npm...
EUVD-2025-123799
Malicious code in perseus-typeorm-mongodb-hydra npm...
Malicious code in nconf-eslint-plugin-postgres-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114637
Malicious code in dagda-hydra-centaurus-hexo npm...
Malicious code in hydra-browserify-oberon-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85215f8ee7923907e152799acfcd88044ad50b3230d0620884214fb708c0e80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113415
Malicious code in frontend-aldebaran-hydra-frontend npm...
EUVD-2025-112668
Malicious code in hydra-hermes-weywot-hercules npm...
Malicious code in quark-mui-adonis-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dd63bf0f4f6b67fe7138fe02f89ed61db758afc8603d44016f528d34166716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hydra-stream-express-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...