1285 matches found
EUVD-2025-121729
Malicious code in spinner-fornax-hermes-karma npm...
EUVD-2025-113487
Malicious code in fornax-hermes-soap-eleventy npm...
EUVD-2025-116719
Malicious code in andromeda-public-zenobia-hermes npm...
EUVD-2025-116318
Malicious code in avior-sedna-adonis-hermes npm...
EUVD-2025-115801
Malicious code in callback-private-hermes-resolvers npm...
MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114742
Malicious code in cygnus-heka-mensa-hermes npm...
EUVD-2025-111184
Malicious code in meteor-rigel-ursa-hermes npm...
Malicious code in rocket-hermes-tailwindcss-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1083ee175837f82ade30090d1c87abe312c2b1ffee07ae3f6ac10b31ae61d3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
MAL-2025-143301 Malicious code in hermes-apollo-gacrux-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5553bc927d985e5101e8ba0aacc171b45c30d4426c466bdf615f3db678e5f196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143323 Malicious code in hermes-rehype-writable-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa3c685d0bd0edf1a3cd5b9568d2d94ca38c3a9e71d7542e1b5e0808955f95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146799 Malicious code in publish-parcel-mysql-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hermes-chakra-ui-phenomic-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111519
Malicious code in lynx-node-sass-hermes-json npm...
Malicious code in hermes-spica-taurus-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1b431aa27cb794f183d676334d065bb20c5a5aa85ada442e41a3e2d0837ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...