EUVD-2025-113802

Malicious code in event-centauri-hermes-rimraf npm...

EUVD-2025-112795

Malicious code in hermes-gacrux-meissa-cordelia npm...

EUVD-2025-122228

Malicious code in schema-hermes-protractor-figures npm...

EUVD-2025-112061

Malicious code in jupiter-charon-concurrently-hermes npm...

Malicious code in google-hermes-telesto-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583eed0b0920ff215525064915600ba5db9ac1537af94ba4462d0043514e7c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124279

Malicious code in norma-hermes-javascript-phenomic npm...

EUVD-2025-115895

Malicious code in bulma-command-betelgeuse-hermes npm...

EUVD-2025-121577

Malicious code in subscription-apollo-hermes-spawn npm...

EUVD-2025-111991

Malicious code in karma-upgrade-backend-hermes npm...

EUVD-2025-121739

Malicious code in spinner-build-castor-hermes npm...

EUVD-2025-112801

Malicious code in hermes-cross-env-quasar-duplex npm...

EUVD-2025-121038

Malicious code in ultra-deneb-hermes-relay npm...

EUVD-2025-111397

Malicious code in markdown-xanthus-less-loader-hermes npm...

EUVD-2025-115416

Malicious code in chariklo-avior-corvus-hermes npm...

EUVD-2025-112187

Malicious code in jest-hermes-configstore-supervisor npm...

EUVD-2025-120490

Malicious code in weywot-google-eridanus-hermes npm...

EUVD-2025-114910

Malicious code in cosmos-antares-avior-hermes npm...

Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112705

Malicious code in hugo-transport-node-config-hermes npm...

Malicious code in elektra-ophiuchus-hermes-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773d7cec7eba42a15eb28c5ff40c529ab002c4ab4f2a7b1085adc30aabf1a1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...