1282 matches found
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
EUVD-2025-115801
Malicious code in callback-private-hermes-resolvers npm...
EUVD-2025-115260
Malicious code in colors-elektra-hermes-spawn npm...
EUVD-2025-120956
Malicious code in uninstall-yildun-corvus-hermes npm...
EUVD-2025-116318
Malicious code in avior-sedna-adonis-hermes npm...
Malicious code in forever-init-hermes-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113342
Malicious code in gacrux-hermes-mysql-meteor npm...
EUVD-2025-115052
Malicious code in configstore-magellan-express-hermes npm...
Malicious code in hermes-chakra-ui-phenomic-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112635
Malicious code in hyperion-hermes-oauth-non-blocking npm...
EUVD-2025-112796
Malicious code in hermes-enceladus-commitizen-kaus npm...
EUVD-2025-112812
Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe npm...
Malicious code in virgo-rehype-hermes-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114363
Malicious code in dotenv-safe-cluster-hermes-sqlite npm...
EUVD-2025-112030
Malicious code in jwt-publish-hermes-miranda npm...
Malicious code in canopus-hermes-postcss-loader-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124871
Malicious code in miranda-pino-pretty-janus-hermes npm...
EUVD-2025-123134
Malicious code in publish-hermes-oauth-sqlite npm...