Malicious code in grus-nodemon-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d559410a1d7d46410b0043f04df13062a94d3ab8a1f955226d05167489046f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178544

Malicious code in hercules-pyxis-rehype-hermes npm...

EUVD-2025-178638

Malicious code in grus-nodemon-rehype-hermes npm...

EUVD-2025-120661

Malicious code in warp-dotenv-safe-rehype-hermes npm...

MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122750

Malicious code in rehype-hermes-spica-webdriver-mocha npm...

Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149168 Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120761

Malicious code in virgo-rehype-hermes-mui npm...