EUVD-2025-178534

Malicious code in hermes-version-mdx-yaml npm...

EUVD-2025-111991

Malicious code in karma-upgrade-backend-hermes npm...

EUVD-2025-122170

Malicious code in sedna-altair-jupiter-hermes npm...

EUVD-2025-123991

Malicious code in package-framework-aurora-hermes npm...

EUVD-2025-112727

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes npm...

Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114654

Malicious code in dactyl-superagent-csv-hermes npm...

MAL-2025-146799 Malicious code in publish-parcel-mysql-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-celeste-react-bootstrap-nodejs (npm)

The package hermes-celeste-react-bootstrap-nodejs was found to contain malicious code...