EUVD-2025-112666

Malicious code in hydra-magellan-forever-astro npm...

EUVD-2025-116333

Malicious code in avior-framework-hydra-frontend npm...

EUVD-2025-123689

Malicious code in pino-pretty-frontend-sqlite-hydra npm...

EUVD-2025-112663

Malicious code in hydra-pavo-taurus-betelgeuse npm...

EUVD-2025-112659

Malicious code in hydra-rigel-eris-module npm...

EUVD-2025-122676

Malicious code in remark-hydra-rate-limiter-oauth npm...

EUVD-2025-124214

Malicious code in nuxtjs-hydra-betelgeuse-yildun npm...

EUVD-2025-111627

Malicious code in local-hydra-lint-cypress npm...

Malicious code in chai-hydra-nova-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88802ffb106059937972a18c280935bd5f60825e8fa115b270389316dced2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113566

Malicious code in fomalhaut-lyra-public-hydra npm...

EUVD-2025-114330

Malicious code in dotenv-safe-transport-corvus-hydra npm...

Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148382 Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145082 Malicious code in mocha-hydra-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b569350d9c7cbb45d002eb8913e10eeeafd12c6e96224ef7ea5e5afd581bdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143443 Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...