EUVD-2025-124792

Malicious code in mongodb-element-ui-apollo-hermes npm...

MAL-2025-140850 Malicious code in colors-figures-hermes-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0d461a39e2a3c5b55bbcc5d75fcf61a6d0ccbbbd2705f05c448b7037bfc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141455 Malicious code in dactyl-superagent-csv-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac37a2b7d4cf959487b6971f5a52dfd4de82f944d66391f5002aadcedb11b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122156

Malicious code in sedna-hermes-ganymede-puppeteer npm...

EUVD-2025-112793

Malicious code in hermes-publish-husky-ultra npm...

EUVD-2025-112787

Malicious code in hermes-request-antares-less-loader npm...

EUVD-2025-123439

Malicious code in prettier-plugin-markdown-hermes-inquirer-rehype npm...

EUVD-2025-112790

Malicious code in hermes-radiant-lint-staged-sirius npm...

EUVD-2025-112798

Malicious code in hermes-development-browserify-framework npm...

EUVD-2025-121643

Malicious code in start-stop-terser-hermes npm...

EUVD-2025-112794

Malicious code in hermes-halley-semantic-release-rigel npm...

EUVD-2025-114159

Malicious code in elektra-ophiuchus-hermes-publish npm...

EUVD-2025-122373

Malicious code in run-script-nconf-hermes-commitizen npm...

EUVD-2025-112788

Malicious code in hermes-relay-mensa-rollup-plugin npm...

EUVD-2025-114233

Malicious code in elara-hermes-element-ui-ini npm...

EUVD-2025-123623

Malicious code in pm2-grus-castor-hermes npm...

Malicious code in global-phoebe-hermes-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b9cf8f68fe78b8401aafb88d4aaf8ce51f84264f6b6d3ad78a28340871c9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121333

Malicious code in testcafe-husky-betelgeuse-hermes npm...

EUVD-2025-122750

Malicious code in rehype-hermes-spica-webdriver-mocha npm...

EUVD-2025-120767

Malicious code in virgo-nightwatch-hermes-airbnb npm...