EUVD-2025-111526

Malicious code in lynx-avior-pino-hydra npm...

EUVD-2025-115539

Malicious code in ceres-hydra-rocket-stop npm...

EUVD-2025-111954

Malicious code in kaus-venus-hydra-quantum npm...

EUVD-2025-120866

Malicious code in ursa-meteor-hydra-oberon npm...

EUVD-2025-124090

Malicious code in ophiuchus-ophiuchus-hydra-yakutsk npm...

EUVD-2025-121964

Malicious code in sirius-loop-axios-hydra npm...

EUVD-2025-122377

Malicious code in run-script-gulp-hydra-jekyll npm...

EUVD-2025-115226

Malicious code in comet-mutation-hydra-spawn npm...

EUVD-2025-113877

Malicious code in eslint-plugin-ignite-carina-hydra npm...

Malicious code in airbnb-relay-hydra-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5aac16f1f71a40b66a4d15575c7941b18cb0512e745728dd89bc41dabb55d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123799

Malicious code in perseus-typeorm-mongodb-hydra npm...

EUVD-2025-113415

Malicious code in frontend-aldebaran-hydra-frontend npm...

Malicious code in fornax-metalsmith-fork-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5b8e68461ff828257fd3b73d19f935cbd1d9b9033b8aea6b327f49d220c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-rigel-eris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124014

Malicious code in orbit-hydra-test-venus npm...

EUVD-2025-112943

Malicious code in halley-superagent-hydra-sqlite npm...

Malicious code in nconf-eslint-plugin-postgres-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120572

Malicious code in webdriver-mocha-miranda-virgo-hydra npm...

EUVD-2025-124605

Malicious code in nconf-eslint-plugin-postgres-hydra npm...

Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...