219 matches found
Malicious code in miranda-yonder-css-loader-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112668
Malicious code in hydra-hermes-weywot-hercules npm...
EUVD-2025-115866
Malicious code in bunyan-airbnb-hercules-protractor npm...
EUVD-2025-114741
Malicious code in cygnus-hercules-altair-ultra npm...
Malicious code in hercules-meteor-sync-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1c40a1e572a21b09edc363496e9529bef3811850b83d40f0e9b07ca9d5be10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112816
Malicious code in hercules-shelljs-xerxes-janus npm...
EUVD-2025-112827
Malicious code in hercules-husky-ariel-version npm...
EUVD-2025-112843
Malicious code in hercules-andromeda-cors-aether npm...
Malicious code in helmet-enif-gridsome-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121092
Malicious code in typeorm-astro-playwright-hercules npm...
EUVD-2025-112832
Malicious code in hercules-electron-builder-testcafe-iota npm...
EUVD-2025-121193
Malicious code in tool-hercules-jwt-nightwatch npm...
EUVD-2025-112837
Malicious code in hercules-command-spawn-hapi npm...
MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jwt-spectron-global-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116214
Malicious code in backend-hercules-janus-leda npm...
EUVD-2025-112833
Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade npm...
EUVD-2025-123577
Malicious code in polaris-google-proxima-hercules npm...