Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147841 Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114363

Malicious code in dotenv-safe-cluster-hermes-sqlite npm...

Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...