750 matches found
EUVD-2025-178486
Malicious code in hydra-cryovolcano-darkmatter-quasarjet npm...
EUVD-2025-178484
Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin npm...
EUVD-2025-178481
Malicious code in hydra-lepton-interstellarmedium-entanglement npm...
EUVD-2025-178483
Malicious code in hydra-helmet-terser-webpack-plugin-ignite npm...
EUVD-2025-177247
Malicious code in perseus-vuepress-hydra-backend npm...
EUVD-2025-178482
Malicious code in hydra-hermes-ichnology-ariel npm...
Malicious code in perseus-vuepress-hydra-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48f0d7a8566a862bfe61b11b8118fdb2cbf0957a5ccfa1f8038789745cb5a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187403 Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aa39d2cf73e1508204d2e22e08291cfcfeb4fdecb5a627d7b869aca7ae494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12787
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...
EUVD-2025-120751
Malicious code in vortex-antares-axios-hydra npm...
EUVD-2025-122993
Malicious code in quark-mui-adonis-hydra npm...
EUVD-2025-112664
Malicious code in hydra-ora-npm-nashira npm...
EUVD-2025-112677
Malicious code in hydra-betelgeuse-prompts-soap npm...
EUVD-2025-112651
Malicious code in hydra-wasat-venus-ini npm...
Malicious code in upgrade-hydra-pipe-sadr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124354
Malicious code in nodejs-hydra-jest-quito npm...
EUVD-2025-116668
Malicious code in antares-prompts-wolf-hydra npm...