discovered
hyatt-avatar is identified in the SafeDep analysis "Malicious npm Packages Impersonating Hyatt Internal Dependencies". Three malicious npm packages disguised as Hyatt internal dependencies were discovered using install hooks to execute malicious payloads. All packages share identical attack patterns and infrastructure.