EUVD-2025-112943

Malicious code in halley-superagent-hydra-sqlite npm...

EUVD-2025-124354

Malicious code in nodejs-hydra-jest-quito npm...

EUVD-2025-124836

Malicious code in mocha-hydra-semantic-ui-celeste npm...

EUVD-2025-124141

Malicious code in octans-resolvers-inquirer-hydra npm...

EUVD-2025-121544

Malicious code in superagent-hydra-algol-request npm...

EUVD-2025-112673

Malicious code in hydra-duplex-ursa-less npm...

EUVD-2025-111716

Malicious code in link-await-hydra-bellatrix npm...

Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112658

Malicious code in hydra-rimraf-apollo-gacrux npm...

EUVD-2025-112674

Malicious code in hydra-cressida-wasat-polaris npm...

EUVD-2025-113475

Malicious code in fornax-metalsmith-fork-hydra npm...

EUVD-2025-121605

Malicious code in stream-jasmine-global-hydra npm...

Malicious code in hydra-rimraf-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862ee4d81cec6ce838fc6610ce9041b85853f5d7b913a818c76b52999ae9d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122592

Malicious code in resolvers-kastra-hydra-eclipse npm...

EUVD-2025-112664

Malicious code in hydra-ora-npm-nashira npm...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143447 Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139757 Malicious code in auth0-schema-nightwatch-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fb466e8ca9d678f6b37b895e5922e2d185b269f83992618d61b99e4e322732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148382 Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...