Malicious code in jasmine-bunyan-hydra-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562c5bdccf2f66b6c5ea71416bdc7a627f6cf8e331b72ecaecb4431ca64cdf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123773

Malicious code in phoebe-dactyl-hydra-uglify-js npm...

Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115465

Malicious code in chalk-hydra-parcel-prompts npm...

EUVD-2025-120472

Malicious code in wezen-kaus-hydra-astro npm...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148382 Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144273 Malicious code in leda-hydra-pm2-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56e20b55b72b350fc2e6d9234e19db1c5dd0f9a3428ab870886fa15a9efa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121543

Malicious code in superagent-hydra-kinetic-procyon npm...

Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112669

Malicious code in hydra-hapi-webdriver-manager-async npm...

EUVD-2025-112665

Malicious code in hydra-neptune-ursa-jest npm...

EUVD-2025-112654

Malicious code in hydra-standard-dependencies-fornax npm...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...