1285 matches found
EUVD-2025-120780
Malicious code in virgo-backend-hermes-eslint-plugin npm...
EUVD-2025-111454
Malicious code in magellan-sass-loader-hermes-vortex npm...
EUVD-2025-121443
Malicious code in taurus-xerxes-hermes-ariel npm...
EUVD-2025-120761
Malicious code in virgo-rehype-hermes-mui npm...
EUVD-2025-113543
Malicious code in forever-init-hermes-electron npm...
Malicious code in hermes-child-process-event-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124506
Malicious code in nextjs-figures-hermes-spinner npm...
EUVD-2025-111238
Malicious code in metalsmith-graphql-pegasus-hermes npm...
EUVD-2025-112789
Malicious code in hermes-rehype-writable-eleventy npm...
Malicious code in xo-hermes-csv-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac54c4f56f565c7cc1577845904c3da765754c0aef53b6fda637b70bad32dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kronos-atlas-hermes-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef430981ccb016d5bf1ae230f4790307b93b95f5a63ef060bec70b250b663ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123123
Malicious code in publish-parcel-mysql-hermes npm...
Malicious code in colors-elektra-hermes-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36783a474b043cdb1e111f0a4ff2ec93bf162f4492ff990caa669c4b82dced6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124505
Malicious code in nextjs-hermes-sails-acamar npm...
EUVD-2025-122928
Malicious code in quito-hermes-mysql-sirius npm...
EUVD-2025-114272
Malicious code in dynamo-sequelize-hermes-playwright npm...
Malicious code in css-loader-spinner-hermes-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...