EUVD-2025-122082

Malicious code in semantic-ui-cluster-hermes-postcss-loader npm...

EUVD-2025-112002

Malicious code in karma-hermes-supervisor-sedna npm...

EUVD-2025-112784

Malicious code in hermes-stop-uglify-js-axios npm...

EUVD-2025-121584

Malicious code in style-loader-sass-loader-public-hermes npm...

EUVD-2025-112815

Malicious code in hermes-acamar-pino-pretty-nodemon npm...

Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146508 Malicious code in prettier-stylelint-hermes-package-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ba28e1dbc4cabd7ec966be39af97ff046d7a35a1089987eab1a33943663d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142308 Malicious code in event-centauri-hermes-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b18852ada8f89c69391c09adc9da0f5888546f603e7fbdedb92e8893f622d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148021 Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111397

Malicious code in markdown-xanthus-less-loader-hermes npm...

EUVD-2025-111238

Malicious code in metalsmith-graphql-pegasus-hermes npm...

EUVD-2025-111184

Malicious code in meteor-rigel-ursa-hermes npm...

EUVD-2025-112635

Malicious code in hyperion-hermes-oauth-non-blocking npm...

EUVD-2025-112636

Malicious code in hyperion-hermes-jsonp-ceres npm...

EUVD-2025-112634

Malicious code in hyperion-hermes-xerxes-yakutsk npm...

EUVD-2025-112358

Malicious code in izar-delphinus-ursa-hermes npm...

EUVD-2025-111991

Malicious code in karma-upgrade-backend-hermes npm...

EUVD-2025-111898

Malicious code in kronos-atlas-hermes-local npm...

Malicious code in aquarius-hermes-indus-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcfeacb65f8e0f5baba5b352b01cad8d2ac7891eb85b46fda4f3388be39fffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...