1285 matches found
EUVD-2025-121570
Malicious code in subscription-fetch-orbit-hermes npm...
EUVD-2025-123127
Malicious code in publish-miranda-hugo-hermes npm...
EUVD-2025-115433
Malicious code in changelog-markdown-pdf-rocket-hermes npm...
Malicious code in redis-hermes-mocha-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3503433e49e30054cd2630595517ac5f56481aa4d95e98c70613239f8bdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143488 Malicious code in hyperion-mocha-start-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8b887874b9898ac0f6e0f183bc4dee8c0d7a569bb6ad9dd7ef8d6ebeefbed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subscription-apollo-hermes-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120088
Malicious code in yonder-slides-hermes-link npm...
EUVD-2025-112780
Malicious code in hermes-webdriver-manager-janus-hyperion npm...
Malicious code in upgrade-hermes-jovian-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111898
Malicious code in kronos-atlas-hermes-local npm...
EUVD-2025-120913
Malicious code in upgrade-hermes-jovian-lint npm...
Malicious code in jest-hermes-configstore-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142308 Malicious code in event-centauri-hermes-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b18852ada8f89c69391c09adc9da0f5888546f603e7fbdedb92e8893f622d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114107
Malicious code in eleventy-link-hermes-sagitta npm...