EUVD-2025-121938

Malicious code in slides-hydra-cordelia-rate-limiter npm...

Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114792

Malicious code in css-loader-spinner-hermes-hydra npm...

EUVD-2025-112661

Malicious code in hydra-postcss-heka-rigel npm...

EUVD-2025-112660

Malicious code in hydra-private-quantum-test npm...

EUVD-2025-112667

Malicious code in hydra-iota-metalsmith-dotenv-safe npm...

Malicious code in octans-resolvers-inquirer-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce10f99dcad14b2740428d97e64e745d7d2d3478551e49ef77c01142768d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112657

Malicious code in hydra-sails-jekyll-pm2 npm...

EUVD-2025-116333

Malicious code in avior-framework-hydra-frontend npm...

EUVD-2025-120336

Malicious code in xanadu-firebase-hydra-avior npm...

EUVD-2025-112441

Malicious code in install-config-hydra-pm2 npm...

EUVD-2025-115465

Malicious code in chalk-hydra-parcel-prompts npm...

Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148382 Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144273 Malicious code in leda-hydra-pm2-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56e20b55b72b350fc2e6d9234e19db1c5dd0f9a3428ab870886fa15a9efa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...