EUVD-2025-112652

Malicious code in hydra-uninstall-cli-pyxis npm...

EUVD-2025-124214

Malicious code in nuxtjs-hydra-betelgeuse-yildun npm...

Malicious code in hydra-rimraf-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862ee4d81cec6ce838fc6610ce9041b85853f5d7b913a818c76b52999ae9d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113475

Malicious code in fornax-metalsmith-fork-hydra npm...

Malicious code in perseus-typeorm-mongodb-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-cressida-wasat-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fe8088deb79bb4176a0feb311372b483060e8c976766f5c8670779c1eb9bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112671

Malicious code in hydra-eslint-config-nodejs-triton npm...

EUVD-2025-124836

Malicious code in mocha-hydra-semantic-ui-celeste npm...

EUVD-2025-112164

Malicious code in jovian-hydra-chakra-ui-rimraf npm...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124295

Malicious code in non-blocking-subscription-phoebe-hydra npm...

EUVD-2025-112676

Malicious code in hydra-browserify-oberon-umbriel npm...

EUVD-2025-112004

Malicious code in karma-gridsome-backend-hydra npm...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143453 Malicious code in hydra-rigel-eris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-ora-npm-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce129e7fe90819908be64c2e70320963d6105ab17830b4acdbfc7c9331e54f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-hydra-nova-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88802ffb106059937972a18c280935bd5f60825e8fa115b270389316dced2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123689

Malicious code in pino-pretty-frontend-sqlite-hydra npm...

MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...