1285 matches found
EUVD-2025-120956
Malicious code in uninstall-yildun-corvus-hermes npm...
MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124871
Malicious code in miranda-pino-pretty-janus-hermes npm...
MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120714
Malicious code in vuetify-mysql-lint-hermes npm...
MAL-2025-143323 Malicious code in hermes-rehype-writable-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa3c685d0bd0edf1a3cd5b9568d2d94ca38c3a9e71d7542e1b5e0808955f95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146799 Malicious code in publish-parcel-mysql-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147841 Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a38dbba7b00e647d69f73f67ae222eb75a0da894f7044cf1f158e753ac6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115258
Malicious code in colors-figures-hermes-babel npm...
Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in frontend-phoenix-hermes-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114387
Malicious code in dotenv-parse-variables-got-hermes-octans npm...
EUVD-2025-112813
Malicious code in hermes-antd-local-scorpius npm...
EUVD-2025-121064
Malicious code in typeorm-xenos-hermes-iota npm...
EUVD-2025-121005
Malicious code in umbra-metalsmith-hermes-perseus npm...
EUVD-2025-114107
Malicious code in eleventy-link-hermes-sagitta npm...