MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143442 Malicious code in hydra-frontend-testcafe-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a9d5ac6a8f78a91341338dcf450760dfae65194d9d62eefb8b885ef7ded353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146232 Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112650

Malicious code in hydra-xanadu-yildun-csrf npm...

Malicious code in kaus-venus-hydra-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5a4b8662afa788e2b7590addd7547d4b4c9ab080c339307c8dd4bc30208c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123773

Malicious code in phoebe-dactyl-hydra-uglify-js npm...

EUVD-2025-121886

Malicious code in soap-vega-hydra-jasmine npm...

EUVD-2025-113053

Malicious code in grunt-development-postcss-loader-hydra npm...

EUVD-2025-115437

Malicious code in changelog-hydra-hugo-ini npm...

EUVD-2025-114325

Malicious code in dotenv-solis-hydra-fork npm...

EUVD-2025-112656

Malicious code in hydra-semantic-release-flare-mutation npm...

EUVD-2025-111716

Malicious code in link-await-hydra-bellatrix npm...

EUVD-2025-113566

Malicious code in fomalhaut-lyra-public-hydra npm...

EUVD-2025-120472

Malicious code in wezen-kaus-hydra-astro npm...

Malicious code in jasmine-bunyan-hydra-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562c5bdccf2f66b6c5ea71416bdc7a627f6cf8e331b72ecaecb4431ca64cdf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112666

Malicious code in hydra-magellan-forever-astro npm...

EUVD-2025-112266

Malicious code in jasmine-bunyan-hydra-celeste npm...

EUVD-2025-116646

Malicious code in antd-google-hydra-canopus npm...

EUVD-2025-116840

Malicious code in airbnb-relay-hydra-nova npm...

Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...